Known vulnerabilities in Vault - page 3

Vendor: HashiCorp
Software: Vault
Software CPE: cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vault Vault is affected by 66 known vulnerabilities: 5 high, 34 medium, 27 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74186 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25000
CWE-200 Medium
No
No
1.11.9, 1.12.5, 1.13.1 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU73246 - Improper Access Control
CVE-2023-24999
CWE-284 Low
No
No
1.10.11, 1.11.8, 1.12.4, 1.13.0 11.03.2023 SB2023031101
SB2023062140
SB2023062315
and 2 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
1.10.10, 1.11.7, 1.12.3 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68254 - Improper Authentication
CVE-2022-41316
CWE-287 Medium
No
No
1.9.10, 1.10.7, 1.11.4 12.10.2022 SB2022101241
SB2022112521
SB2023011939
and 2 more
#VU67534 - Permissions, Privileges, and Access Controls
CVE-2022-40186
CWE-264 Low
No
No
1.9.9, 1.10.6, 1.11.3 21.09.2022 SB2022092124
SB2022112521
SB2023042647
#VU66119 - Improper Access Control
CVE-2022-36129
CWE-284 Medium
No
No
1.9.8, 1.10.5, 1.11.1 04.08.2022 SB2022080438
#VU66118 - Security Features
CVE-2022-30689
CWE-254 Low
No
No
1.10.2 04.08.2022 SB2022080437
SB2022080439
#VU66117 - Improper Certificate Validation
CVE-2022-25243
CWE-295 Medium
No
No
1.8.9, 1.9.4 04.08.2022 SB2022031039
SB2022080439
#VU66116 - Permissions, Privileges, and Access Controls
CVE-2021-45042
CWE-264 Low
No
No
1.7.8, 1.8.7, 1.9.1 04.08.2022 SB2021121734
SB2022080439
#VU66115 - Permissions, Privileges, and Access Controls
CVE-2021-43998
CWE-264 Medium
No
No
1.7.6, 1.8.5 04.08.2022 SB2021113020
SB2022080439
SB2023051845
and 1 more
#VU66114 - Incorrect Permission Assignment for Critical Resource
CVE-2021-41802
CWE-732 Medium
No
No
1.7.5, 1.8.4 04.08.2022 SB2021100818
SB2022080439
#VU66113 - Insufficient Session Expiration
CVE-2021-32923
CWE-613 Medium
No
No
1.5.9, 1.6.5, 1.7.2 04.08.2022 SB2021060327
SB2022080439
#VU55909 - Security Features
CVE-2021-38553
CWE-254 High
No
No
1.6.6, 1.7.4, 1.8.0 17.08.2021 SB2021081707
SB2022080439
#VU55908 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38554
CWE-200 Low
No
No
1.6.6, 1.7.4, 1.8.0 17.08.2021 SB2021081707
SB2022080439
#VU126404 - Improper Certificate Validation
CVE-2021-29653
CWE-295 Low
No
No
1.5.8, 1.6.4, 1.7.1 21.04.2021 SB2021042180
#VU126405 - Improper Certificate Validation
CVE-2021-27400
CWE-295 Medium
No
No
1.6.4, 1.7.1 21.04.2021 SB2021042180
#VU50968 - Improper Access Control
CVE-2021-27668
CWE-284 Medium
No
No
1.6.3 26.02.2021 SB2021022621
SB2022080439
#VU50453 - Improper input validation
CVE-2020-25594
CWE-20 Medium
No
No
1.6.2 01.02.2021 SB2021020127
SB2021013006
SB2022080439
#VU50454 - Improper input validation
CVE-2021-3024
CWE-20 Medium
No
No
1.5.7, 1.6.2 01.02.2021 SB2021020128
SB2021013007
SB2022080439
#VU49141 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35177
CWE-200 Low
No
No
1.5.6, 1.6.1 23.12.2020 SB2020122333
SB2020122334


Showing elements 41 - 60 out of 66