Valicert has a niche vulnerability footprint centered on its enterprise validation authority product, which manages certificate issuance and trust operations in public-key infrastructures. The observed weakness classes, including insufficient entropy in cryptographic operations, reflect the cryptographic and random-number generation demands of certificate lifecycle management; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Valicert over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2001-0950HIGH ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand func | Dec 4, 2001 | 7.5 | 24 | NO | NO |
CVE-2001-0947HIGH Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an inva | Dec 4, 2001 | 7.5 | 20 | NO | NO |
CVE-2001-0948HIGH Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false info | Dec 4, 2001 | 7.5 | 20 | NO | NO |
CVE-2001-0949HIGH Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary cod | Dec 4, 2001 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Valicert.
Media articles that mention a CVE ID that affects a product developed by Valicert — matched by CVE ID, not by vendor name.