Get Started

PSIRT Advisories & Responses

Stay informed of the latest advisories and responses for OneSpan Security Products

PSIRT Advisories and Responses

Advisories provide detailed information about security issues that directly involve OneSpan products and require a fix, upgrade, or action from the customer. 

Responses address issues that require a response to information discussed in a public forum such as a blog.
There are several ways to receive the latest product vulnerability information from OneSpan:

Chevron down icon
  • Security Advisory
  • Security Response

April 4, 2022 Vulnerabilities in Java Spring Framework component in OneSpan products
December 13, 2021 Remote code execution vulnerability in Log4j2 component in OneSpan products
August 28, 2018 Remote code execution vulnerability in Apache Struts 2 component in OneSpan products
January 18, 2018 Meltdown and Spectre Vulnerabilities in IDENTIKEY Appliance and IDENTIKEY Virtual Appliance
March 14, 2017 CVE-2017-5638 Apache Struts Vulnerability in OneSpan Products
February 23, 2016 CVE-2015-7547 vulnerability in OneSpan products
November 26, 2015 Cross-site scripting in Apache Struts component used in IDENTIKEY Authentication Server
September 03, 2015 Reflected cross-site scripting vulnerability in DIGIPASS authentication for Citrix Web Interface
September 03, 2015 Multiple OpenSSL vulnerabilities in OneSpan products
April 13, 2015 Multiple OpenSSL Issues Affecting OneSpan products
March 23, 2015 Reflected cross-site scripting vulnerability in IDENTIKEY Authentication Server help function
February 04, 2015 glibc GHOST vulnerability in OneSpan products
October 29, 2014 Open redirect and cross-site scripting vulnerabilities in OneSpan IDENTIKEY products
October 17, 2014 SSL 3.0 POODLE vulnerability in OneSpan products
September 30, 2014 GNU Bash Environment Variable Command Injection Vulnerability in OneSpan products
April 17, 2014 OpenSSL Heartbleed Vulnerability in OneSpan products

 

October 19, 2016 Mitigating Transaction Manipulation Attacks against App-based Authentication Schemes
May 05, 2015 Covert Redirect Flaw in OAuth does not affect MYDIGIPASS.COM