Known vulnerabilities in Vault Enterprise - page 3

Vendor: HashiCorp
Software CPE: cpe:2.3:a:hashicorp:vault_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vault Enterprise Vault Enterprise is affected by 69 known vulnerabilities: 3 high, 37 medium, 29 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78742 - Improper input validation
CVE-2023-3774
CWE-20 Medium
No
No
1.12.9, 1.13.5, 1.14.1 28.07.2023 SB2023072812
#VU77145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2121
CWE-79 Low
No
No
1.11.11, 1.12.7, 1.13.3, 1.14.0 12.06.2023 SB2023061203
SB2023112450
SB2025040717
#VU75638 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-2197
CWE-327 Medium
No
No
1.13.2 01.05.2023 SB2023050132
#VU74186 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25000
CWE-200 Medium
No
No
1.11.9, 1.12.5, 1.13.1 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU74184 - Improper input validation
CVE-2023-0665
CWE-20 Medium
No
No
1.11.9, 1.12.5, 1.13.1 30.03.2023 SB2023033012
SB2023051810
SB2023062140
and 2 more
#VU73246 - Improper Access Control
CVE-2023-24999
CWE-284 Low
No
No
1.10.11, 1.11.8, 1.12.4, 1.13.0 11.03.2023 SB2023031101
SB2023062140
SB2023062315
and 2 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
1.10.10, 1.11.7, 1.12.3 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU68254 - Improper Authentication
CVE-2022-41316
CWE-287 Medium
No
No
1.9.10, 1.10.7, 1.11.4 12.10.2022 SB2022101241
SB2022112521
SB2023011939
and 2 more
#VU67534 - Permissions, Privileges, and Access Controls
CVE-2022-40186
CWE-264 Low
No
No
1.9.9, 1.10.6, 1.11.3 21.09.2022 SB2022092124
SB2022112521
SB2023042647
#VU66119 - Improper Access Control
CVE-2022-36129
CWE-284 Medium
No
No
1.9.8, 1.10.5, 1.11.1 04.08.2022 SB2022080438
#VU66118 - Security Features
CVE-2022-30689
CWE-254 Low
No
No
1.10.2 04.08.2022 SB2022080437
SB2022080439
#VU66117 - Improper Certificate Validation
CVE-2022-25243
CWE-295 Medium
No
No
1.8.9, 1.9.4 04.08.2022 SB2022031039
SB2022080439
#VU66116 - Permissions, Privileges, and Access Controls
CVE-2021-45042
CWE-264 Low
No
No
1.7.8, 1.8.7, 1.9.1 04.08.2022 SB2021121734
SB2022080439
#VU66115 - Permissions, Privileges, and Access Controls
CVE-2021-43998
CWE-264 Medium
No
No
1.7.6, 1.8.5 04.08.2022 SB2021113020
SB2022080439
SB2023051845
and 1 more
#VU66114 - Incorrect Permission Assignment for Critical Resource
CVE-2021-41802
CWE-732 Medium
No
No
1.7.5, 1.8.4 04.08.2022 SB2021100818
SB2022080439
#VU66113 - Insufficient Session Expiration
CVE-2021-32923
CWE-613 Medium
No
No
1.5.9, 1.6.5, 1.7.2 04.08.2022 SB2021060327
SB2022080439
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
1.10.0 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU126406 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25244
CWE-200 Low
No
No
1.7.10, 1.8.9, 1.9.4 04.03.2022 SB2022031039
#VU55909 - Security Features
CVE-2021-38553
CWE-254 High
No
No
1.6.6, 1.7.4, 1.8.0 17.08.2021 SB2021081707
SB2022080439
#VU55908 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38554
CWE-200 Low
No
No
1.6.6, 1.7.4, 1.8.0 17.08.2021 SB2021081707
SB2022080439


Showing elements 41 - 60 out of 69