Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/pki-core@10.5.16-7?arch=el7_7
purl pkg:rpm/redhat/pki-core@10.5.16-7?arch=el7_7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.6
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-7v3m-meaa-sudu
Aliases:
CVE-2019-10179
pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab There are no reported fixed by versions.
VCID-97tw-ymj8-6bbj
Aliases:
CVE-2019-10221
pki-core: Reflected XSS in getcookies?url= endpoint in CA There are no reported fixed by versions.
VCID-h3y6-zuub-2kdj
Aliases:
CVE-2020-25715
pki-core: XSS in the certificate search results There are no reported fixed by versions.
VCID-pf14-dtsb-ebd2
Aliases:
CVE-2020-1721
pki-core: KRA vulnerable to reflected XSS via the getPk12 page There are no reported fixed by versions.
VCID-qwg3-thj2-tkav
Aliases:
CVE-2019-10146
pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page There are no reported fixed by versions.
VCID-z6js-5t5m-fka9
Aliases:
CVE-2021-20179
pki-core: Unprivileged users can renew any certificate There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:12:56.527832+00:00 RedHat Importer Affected by VCID-pf14-dtsb-ebd2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1721.json 38.0.0
2026-04-01T14:12:56.460906+00:00 RedHat Importer Affected by VCID-97tw-ymj8-6bbj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10221.json 38.0.0
2026-04-01T14:12:56.173939+00:00 RedHat Importer Affected by VCID-qwg3-thj2-tkav https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10146.json 38.0.0
2026-04-01T14:12:56.106234+00:00 RedHat Importer Affected by VCID-7v3m-meaa-sudu https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10179.json 38.0.0
2026-04-01T14:03:04.220477+00:00 RedHat Importer Affected by VCID-h3y6-zuub-2kdj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25715.json 38.0.0
2026-04-01T14:02:48.938167+00:00 RedHat Importer Affected by VCID-z6js-5t5m-fka9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20179.json 38.0.0