CVE-2019-13498

PoC —

CVSS 3.1

7.4 high

EPSS

1%p67

Published

Jul 29, 2019 (Jul 29, 2019)

Modified

Jun 17, 2026

Description

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.

Vendors: oneidentity
Products: cloud access manager
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.