What’s Vulnerable › Vulnerabilities

CVE-2019-13498

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-29 · updated 2026-06-17
• Weakness: CWE-319

Description

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.

Affected products

• OneIdentity Cloud Access Manager: 8.1.3

References

• https://github.com/FurqanKhan1/CVE-2019-13498
• https://support.oneidentity.com/technical-documents/cloud-access-manager/8.1.4/release-notes#TOPIC-1028731
• https://github.com/FurqanKhan1/CVE-2019-13498
• https://support.oneidentity.com/technical-documents/cloud-access-manager/8.1.4/release-notes#TOPIC-1028731

Get alerted when CVE-2019-13498 or the next vulnerability affects your stack