Vulnerabilities in LDAPAccountManager

12 results

CVE-2024-23333HIGHLAM vulnerable to Authenticated Remote Code ExecutionEPSS 17.8%CVE-2022-31084CRITICALUnauthenticated Remote Code Execution in ldap-account-managerEPSS 2.5%CVE-2022-31086MEDIUMIncorrect Regular Expressions in ldap-account-managerEPSS 2.3%CVE-2022-31088MEDIUMUnauthenticated LDAP Injection in ldap-account-managerEPSS 1.3%CVE-2022-24851HIGHStored XSS and path traversal in LDAPAccountManager/lamEPSS 1.1%CVE-2024-52792MEDIUMArbitrary config values override in lamEPSS 0.7%CVE-2026-27895MEDIUMLAM has incorrect regular expression in PDF export component that allows user to upload files of any typeEPSS 0.4%CVE-2022-31087HIGHIncorrect Default Permissions in ldap-account-managerEPSS 0.4%CVE-2026-27894HIGHLAM has Authenticated Local File Inclusion (LFI) in PDF exportEPSS 0.4%CVE-2022-31085MEDIUMMissing Encryption of Sensitive Data in ldap-account-managerEPSS 0.3%CVE-2026-55167MEDIUMLDAP Account Manager: WebAuthn authentication challenge is kept in the PHP sessionEPSS 0.2%CVE-2025-58174MEDIUMLAM profile editor stored cross-site scripting vulnerabilityEPSS 0.2%