Browse CVEs

MEDIUM 6.5 CVE-2021-41845 A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.00… Secret Server 11.0.000007+ Fix from $1,6002021-10-01 HIGH 7.5 CVE-2021-34679 Thycotic Password Reset Server before 5.3.0 allows credential disclosure. Password Reset Server 5.3.0+ Fix from $1,9502021-06-11 CRITICAL 9.8 CVE-2019-18355 An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7. Secret Server 10.7.000000+ Fix from $2,3002019-10-23 MEDIUM 6.1 CVE-2019-18356 An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2). Secret Server 10.7.000000+ Fix from $1,6002019-10-23 MEDIUM 6.1 CVE-2019-18357 An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2). Secret Server 10.7.000000+ Fix from $1,6002019-10-23 CRITICAL 9.8 CVE-2014-4861 The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted passwor… Secret Server after 8.6.000009 Fix from $2,3002018-03-09 MEDIUM 5.4 CVE-2017-11725 The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections. Secret Server after 10.2.000018 Fix from $1,6002017-07-29 MEDIUM 5.8 CVE-2015-4094 The Thycotic Password Manager Secret Server application through 2.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-… Secret Server after 2.3 Fix from $1,6002015-06-02