Known vulnerabilities in FreeIPA 4.1.0.alpha1

Software: FreeIPA
Version: 4.1.0.alpha1
Software CPE: cpe:2.3:a:freeipa_org:freeipa:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 5
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.6

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FreeIPA version 4.1.0.alpha1 FreeIPA 4.1.0.alpha1 is affected by 5 vulnerabilities: 1 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112054 - Improper input validation
CVE-2025-4404
CWE-20 Medium
Public exploit available
No
4.12.4 30.06.2025 SB2025063081
SB2025063085
SB2025063086
and 14 more
#VU92249 - Use of Password Hash With Insufficient Computational Effort
CVE-2024-3183
CWE-916 Low
Public exploit available
No
4.11.2, 4.12.1 19.06.2024 SB2024061917
SB2024061918
SB2024061919
and 11 more
#VU85268 - Cross-Site Request Forgery (CSRF)
CVE-2023-5455
CWE-352 Medium
No
No
4.6.10, 4.9.14, 4.10.3, 4.11.1 10.01.2024 SB2024011032
SB2024011039
SB2024011040
and 17 more
#VU47198 - Resource exhaustion
CVE-2020-1722
CWE-400 Medium
No
No
4.8.1 27.04.2020 SB2020042729
SB2020093090
SB2020110508
#VU36812 - Improper input validation
CVE-2017-2590
CWE-20 High
No
No
4.4.0 27.07.2018 SB2018072718
SB2017022711
SB2017030214