HV
Product
Hashicorp Vault
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Hashicorp Vault to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36888 | 6.5 | Jul 27 | A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault… Affected: through 354.vdb_858fd6b_f48 |
| CVE-2022-25197 | 6.5 | Feb 15 | Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system Affected: through 336.v182c0fbaaeb7 |
| CVE-2022-25186 | 6.5 | Feb 15 | Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Vault secrets for use on the agent, allowing attackers able… Affected: through 3.8.0 |
| CVE-2022-23109 | 6.5 | Jan 12 | Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later… Affected: through 3.7.0 |
| CVE-2025-67642 | 4.3 | Dec 10 | Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission… Affected: through 371.v884a_4dd60fb_6 |
Showing 5