CP
Product
Core Privileged Access Manager (BoKS)
5
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Core Privileged Access Manager (BoKS) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13532 | 6.2 | Dec 16 | Weak Password Hash in Core Privileged Access Manager (BoKS) Affected: This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain. The affected platforms are: Debian 11, 12, 13, RedHat 9, 10 and Ubuntu 24. |
| CVE-2026-9864 | 4.8 | Oct 1 | Fortra BoKS Server Agent adjoin machine-account password generation vulnerability Affected: 8.1.0.0 through 8.1.0.29; 9.0.0.0 through 9.0.0.5 |
Showing 2