VA
Product
Vault
78
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 7High 31Medium 37Low 3
Watch
Add Vault to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6011 | 3.7 | Aug 1 | Timing Side-Channel in Vault’s Userpass Auth Method Affected: before 1.20.1 |
| CVE-2025-4656 | 3.1 | Jun 25 | Vault Vulnerable to Recovery Key Cancellation Denial of Service Affected: 1.14.8 before 1.20.0 |
| CVE-2023-2197 | 2.5 | May 1 | HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption… Affected: 1.13.0 before 1.13.2 |
Showing 3