CVE Tools
Track your stack

Gemalto

21 CVEs tracked since 2015. Since Jul 2015, none of them reached CISA KEV.

Gemalto CVEs per month

Jul 2015 to Mar 2018. Point at a month, or focus the strip and use the arrow keys.
Gemalto CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2015-0710
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-1080
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03120

Products

The products that kept showing up in Gemalto's monthly top three, with their CVEs summed over those months.

  1. Gemalto's Hasp Srm, Sentinel Hasp and Sentinel Ldk Products Prior To Sentinel Ldk Rte51 month
  2. Sentinel Ldk Rte52 months
  3. Gemalto's Sentinel Ldk Rte21 month
  4. Safenet Authentication Service Windows Logon Agent21 month
  5. Safenet Luna G511 month
  6. Safenet Luna Pci-e11 month
  7. Safenet Luna Sa11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Gemalto.

  1. CVE-2019-18232SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker ...7.8
  2. CVE-2019-8282Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) ...5.3
  3. CVE-2019-8283Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.6.5
  4. CVE-2019-9156Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.8.0
  5. CVE-2019-9157Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.5.7
  6. CVE-2019-9158Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.5.7
  7. CVE-2019-6534The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.7.8
  8. CVE-2018-15492A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification.7.5
  9. CVE-2018-8900The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Cont...6.1
  10. CVE-2018-6305Denial of service in Gemalto's Sentinel LDK RTE version before 7.657.5
  11. CVE-2018-6304Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service7.5
  12. CVE-2015-7963SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executabl...7.8
  13. CVE-2015-7962SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an...7.8
  14. CVE-2015-7965SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an execu...7.8
  15. CVE-2015-7967SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifyi...7.8

The record

Peak rank
#35 in Mar 2018
Busiest month shown
Mar 2018, 12 CVEs
Months with a KEV entry
0 since Jul 2015
Monthly snapshots
3 since 2015
Gemalto's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store