Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Secret Server MEDIUM 6.5
CVE-2025-12810

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem:…

Mitigation only
Fix from $1,600 2026-01-27
Secret Server HIGH 8.3
CVE-2024-12908

Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's we…

Fix: 11.9.000006+
Fix from $1,950 2024-12-26
Privileged Access Service MEDIUM 6.5
CVE-2024-5865

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary fi…

Fix: after 22.3
Fix from $1,600 2024-07-02
Secret Server HIGH 8.8
CVE-2024-33891

Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. Th…

Fix: 11.7.000001+
Fix from $1,950 2024-04-28
Secret Server HIGH 8.4
CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via …

Mitigation only
Fix from $1,950 2024-03-14
Secret Server MEDIUM 6.7
CVE-2024-25649

In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data…

Mitigation only
Fix from $1,600 2024-03-14
Secret Server MEDIUM 5.3
CVE-2024-25651

User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a use…

Mitigation only
Fix from $1,600 2024-03-14
Distributed Engine MEDIUM 5.9
CVE-2024-25650

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key …

Mitigation only
Fix from $1,600 2024-03-14
Secret Server HIGH 7.2
CVE-2023-4589

Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator…

Mitigation only
Fix from $1,950 2023-09-06