VA
Product
Vault
78
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 7High 31Medium 37Low 3
Watch
Add Vault to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6011 | 3.7 | Aug 1 | A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially… Affected: before 1.16.23; before 1.20.1; 1.17.0 before 1.18.12; 1.19.0 before 1.19.7; 1.20.0 |
| CVE-2025-4656 | 3.1 | Jun 25 | Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator Affected: 1.14.8 before 1.16.22; 1.14.8 before 1.20.0; 1.17.0 before 1.17.17; 1.18.0 before 1.18.11; 1.19.0 before 1.19.6 |
| CVE-2023-2197 | 2.5 | May 1 | HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption… Affected: 1.13.0 before 1.13.2 |
Showing 3