What’s Vulnerable › Products

ldap-account-manager Ldap Account Manager vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ldap-account-manager Ldap Account Manager version is affected

Latest ldap-account-manager Ldap Account Manager vulnerabilities

• CVE-2026-27895 — LAM has incorrect regular expression in PDF export component that allows user to upload files of any type (CVSS 8.8)
• CVE-2026-27894 — LAM has Authenticated Local File Inclusion (LFI) in PDF export (CVSS 8.8)
• CVE-2024-23333 — LAM vulnerable to Authenticated Remote Code Execution (CVSS 6.6)
• CVE-2022-31088 — Unauthenticated LDAP Injection in ldap-account-manager (CVSS 5.3)
• CVE-2022-31087 — Incorrect Default Permissions in ldap-account-manager (CVSS 7.8)
• CVE-2022-31086 — Incorrect Regular Expressions in ldap-account-manager (CVSS 8.8)
• CVE-2022-31085 — Missing Encryption of Sensitive Data in ldap-account-manager (CVSS 6.1)
• CVE-2022-31084 — Unauthenticated Remote Code Execution in ldap-account-manager (CVSS 8.1)
• CVE-2022-24851 — Stored XSS and path traversal in LDAPAccountManager/lam (CVSS 4.8)
• CVE-2012-1115 — (CVSS 6.1)
• CVE-2012-1114 — (CVSS 6.1)
• CVE-2018-8764 — (CVSS 8.8)
• CVE-2018-8763 — (CVSS 6.1)
• CVE-2013-4453 — (CVSS 4.3)