Known vulnerabilities in Vault Enterprise
Vendor:
HashiCorp
Software:
Vault Enterprise
Software CPE:
cpe:2.3:a:hashicorp:vault_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.hashicorp.com/
Total vulnerabilities:
69
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.19.20
1.20.14
1.21.9
1.19.19
1.19.18
1.20.13
1.20.12
1.21.8
1.21.7
2.0.4
1.19.17
1.20.11
1.21.6
2.0.3
2.0.2
2.0.1
1.19.16
1.20.10
1.21.5
1.19.15
1.19.14
1.19.13
1.19.12
1.20.9
1.20.8
1.20.7
1.20.6
2.0.0
1.21.4
1.21.3
1.21.2
1.21.1
1.16.27
1.16.26
1.18.15
1.19.11
1.19.10
1.20.5
1.21.0
1.20.4
1.16.25
1.18.14
1.19.9
1.20.3
1.16.24
1.18.13
1.19.8
1.20.2
1.16.23
1.18.12
1.19.7
1.20.1
1.16.21
1.18.10
1.16.22
1.17.17
1.18.11
1.19.6
1.20.0
1.19.5
1.19.4
1.16.20
1.17.16
1.18.9
1.16.19
1.16.18
1.16.17
1.16.16
1.16.15
1.16.14
1.16.13
1.17.15
1.17.14
1.17.13
1.17.12
1.17.11
1.17.10
1.17.9
1.18.8
1.18.7
1.18.6
1.19.3
1.19.2
1.19.1
1.19.0
1.18.5
1.18.4
1.18.3
1.18.2
1.16.12
1.17.8
1.18.1
1.15.16
1.16.11
1.17.7
1.18.0
1.16.10
1.15.15
1.15.14
1.15.13
1.17.6
1.16.9
1.16.8
1.16.7
1.17.5
1.17.4
1.17.3
1.16.5
1.16.4
1.15.11
1.15.10
1.15.9
1.15.12
1.16.6
1.17.2
1.17.1
1.17.0
1.16.3
1.15.8
1.16.2
1.14.11
1.15.7
1.16.1
1.16.0
1.15.6
1.14.10
1.15.5
1.14.9
1.13.13
1.15.4
1.14.8
1.13.12
1.15.3
1.14.7
1.13.11
1.15.2
1.14.6
1.13.10
1.15.1
1.14.5
1.13.9
1.15.0
1.14.4
1.13.8
1.14.3
1.13.7
1.12.11
1.14.2
1.13.6
1.12.10
1.14.1
1.13.5
1.12.9
1.13.4
1.12.8
1.11.12
1.14.0
1.13.3
1.12.7
1.11.11
1.13.2
1.12.6
1.11.10
1.13.1
1.12.5
1.11.9
1.12.4
1.13.0
1.11.8
1.10.11
1.12.3
1.11.7
1.10.10
1.12.2
1.11.6
1.10.9
1.12.1
1.11.5
1.10.8
1.12.0
1.11.4
1.10.7
1.9.10
1.11.3
1.10.6
1.9.9
1.11.2
1.11.1
1.10.5
1.9.8
1.11.0
1.10.4
1.9.7
1.8.12
1.10.3
1.10.2
1.9.6
1.8.11
1.10.1
1.9.5
1.8.10
1.10.0
1.9.4
1.8.9
1.7.10
1.9.3
1.8.8
1.7.9
1.9.2
1.8.7
1.7.8
1.9.1
1.9.0
1.8.5
1.7.6
1.8.4
1.6.7
1.7.5
1.8.3
1.6.6
1.7.4
1.8.2
1.8.1
1.8.0
1.7.3
1.5.9
1.6.5
1.7.2
1.5.8
1.6.4
1.7.1
1.7.0
1.6.3
1.5.7
1.6.2
1.5.6
1.6.1
1.6.0
1.5.5
1.4.7
1.5.4
1.2.7
1.3.10
1.4.6
1.5.3
1.2.5
1.2.6
1.3.8
1.3.9
1.4.4
1.4.5
1.5.1
1.5.2
1.5.0
1.4.3
1.3.7
1.3.6
1.4.2
1.4.1
1.3.5
1.4.0
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.11.6
0.11.5
0.11.4
0.11.3
0.11.2
0.11.1
0.11.0
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.3
0.8.2
0.8.1
0.8.0
0.7.3
0.7.2
0.7.1
0.7.0
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.3
0.5.2
0.5.1
0.5.0
0.4.1
0.4.0
0.3.1
0.3.0
0.2.0
0.1.2
0.1.1
0.1.0
Vulnerabilities (69)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145119 - Improper Authorization CVE-2026-5006 |
CWE-285 | Low | 1.19.20, 1.20.14, 1.21.9, 2.0.4 | 25.08.2026 |
SB2026082533 |
||
| #VU141396 - Improper Authorization CVE-2026-12624 |
CWE-285 | Low | 1.19.19, 1.20.13, 1.21.8, 2.0.3 | 11.08.2026 |
SB2026081127 |
||
| #VU141395 - Improper Access Control CVE-2026-14886 |
CWE-284 | Low | 1.19.20, 1.20.14, 1.21.9, 2.0.4 | 11.08.2026 |
SB2026081126 |
||
| #VU136683 - Improper Access Control CVE-2026-5051 |
CWE-284 | Low | 1.19.17, 1.20.11, 1.21.6, 2.0.1 | 02.07.2026 |
SB2026070222 |
||
| #VU126410 - Server-Side Request Forgery (SSRF) CVE-2026-5052 |
CWE-918 | Medium | 1.19.16, 1.20.10, 1.21.5, 2.0.0 | 17.04.2026 |
SB2026041755 |
||
| #VU126409 - Exposure of sensitive information to an unauthorized actor CVE-2026-4525 |
CWE-200 | Low | 1.19.16, 1.20.10, 1.21.5, 2.0.0 | 17.04.2026 |
SB2026041755 |
||
| #VU126408 - Missing Authentication for Critical Function CVE-2026-5807 |
CWE-306 | Medium | 1.19.16, 1.20.10, 1.21.5, 2.0.0 | 17.04.2026 |
SB2026041755 |
||
| #VU126407 - Improper Access Control CVE-2026-3605 |
CWE-284 | Low | 1.19.16, 1.20.10, 1.21.5, 2.0.0 | 17.04.2026 |
SB2026041755 |
||
| #VU117644 - Allocation of Resources Without Limits or Throttling CVE-2025-12044 |
CWE-770 | Medium | 1.16.27, 1.19.11, 1.20.5, 1.21.0 | 24.10.2025 |
SB2025102442 SB2025112573 |
||
| #VU117641 - Authentication Bypass Using an Alternate Path or Channel CVE-2025-11621 |
CWE-288 | Medium | 1.16.27, 1.19.11, 1.20.5, 1.21.0 | 24.10.2025 |
SB2025102442 SB2025112573 |
||
| #VU114572 - Resource exhaustion CVE-2025-6203 |
CWE-400 | Medium | 1.16.25, 1.18.14, 1.19.9, 1.20.3 | 30.08.2025 |
SB2025083003 |
||
| #VU113697 - Permissions, Privileges, and Access Controls CVE-2025-5999 |
CWE-264 | Low | 1.16.22, 1.18.11, 1.19.6, 1.20.0 | 06.08.2025 |
SB2025062527 |
||
| #VU113695 - Improper Authentication CVE-2025-6013 |
CWE-287 | Medium | 1.16.24, 1.18.13, 1.19.8, 1.20.2 | 06.08.2025 |
SB2025080621 |
||
| #VU113692 - Improper Authentication CVE-2025-6014 |
CWE-287 | Medium | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 06.08.2025 |
SB2025080578 |
||
| #VU113691 - Improper Authentication CVE-2025-6015 |
CWE-287 | Low | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 06.08.2025 |
SB2025080578 |
||
| #VU113690 - Protection Mechanism Failure CVE-2025-6004 |
CWE-693 | Low | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 06.08.2025 |
SB2025080578 |
||
| #VU113655 - Improper Certificate Validation CVE-2025-6037 |
CWE-295 | Medium | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 05.08.2025 |
SB2025080578 |
||
| #VU113654 - Information Exposure Through Timing Discrepancy CVE-2025-6011 |
CWE-208 | Low | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 05.08.2025 |
SB2025080578 |
||
| #VU113653 - Permissions, Privileges, and Access Controls CVE-2025-6000 |
CWE-264 | Low | 1.16.23, 1.18.12, 1.19.7, 1.20.1 | 05.08.2025 |
SB2025080578 |
||
| #VU111942 - Resource Management Errors CVE-2025-4656 |
CWE-399 | Medium | 1.16.22, 1.17.17, 1.18.11, 1.19.6, 1.20.0 | 25.06.2025 |
SB2025062527 |
Showing elements 1 - 20 out of 69