BO
Product
Boundary
6
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Boundary to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36130 | 9.9 | Sep 1 | HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege… Affected: before 0.10.2 |
| CVE-2024-1052 | 8.0 | Feb 5 | Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering Affected: 0.8.0 before 0.15.0 |
| CVE-2026-7776 | 7.5 | May 4 | Boundary Workers Vulnerable to Denial of Service During TLS Handshake Affected: 0.9.0 before 0.21.3 |
| CVE-2023-0690 | 7.1 | Feb 8 | HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service (KMS) defined in the configuration file, new… Affected: 0.10.0 before 0.12.0 |
| CVE-2022-36182 | 6.1 | Oct 27 | Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to… Affected: before 0.11.0 |
| CVE-2024-12289 | 5.9 | Dec 12 | Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary… Affected: 0.8.0 before 0.16.4; 0.17.0 before 0.17.3; 0.18.0 before 0.18.2 |
Showing 6