CVE-2019-13498

HIGH 7.4CVE-2019-13498 · Published 29/07/2019 · updated 17/06/2026

In short

CVE-2019-13498 is a HIGH (CVSS 7.4) vulnerability affecting cloud access manager (oneidentity).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cloud access manager oneidentity	`= 8.1.3`	No fix yet

Description

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.

References

FurqanKhan1/CVE-2019-13498 · Exploit
support.oneidentity.com/technical-documents/cloud-access-manager/8.1.4/release-notes · Release Notes

More vulnerabilities in cloud access manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free