entrustdatacard vulnerabilities

Products

• entelligence security provider 1
• syntera customization suite 1

Latest entrustdatacard CVEs

Newest publication first

1. CVE-2020-10659 Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with....

   Published 2020-03-18

   Medium·CVSS 4.3

   Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain.

2. CVE-2018-13252 Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.

   Published 2018-07-05

   Medium·CVSS 6.1

   Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.