VE
Product
Vault Enterprise
by HashiCorp · last CVE Oct 7, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 22Medium 22Low 3
Watch

Add Vault Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6011
3.7
0%
Aug 1
Timing Side-Channel in Vault’s Userpass Auth Method
Affected: before 1.20.1
CVE-2025-4656
3.1
0%
Jun 25
Vault Vulnerable to Recovery Key Cancellation Denial of Service
Affected: 1.14.8 before 1.20.0
CVE-2023-2197
2.5
0%
May 1
Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM
Affected: 1.13.0 through 1.13.1
Showing 3