Login Request a demo
SA
Product
Salt
by SaltStack · last CVE Jun 13, 2025
On CISA KEVExploited in the wild
52
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 16High 17Medium 10Low 2
Severity
All severities52Critical16High17Medium10Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Salt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-16846
In wildKEV
9.8
100%
Nov 6
SaltStack Salt Shell Injection Vulnerability
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.11.0 before 2016.11.3; +9 more
CVE-2020-11651
In wildKEV
9.8
97%
Apr 30
SaltStack Salt Authentication Bypass Vulnerability
Affected: before 2019.2.4; 3000 before 3000.2
CVE-2021-33226
9.8
2%
Feb 17
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file
Affected: through 3003
CVE-2021-3197
9.8
72%
Feb 27
An issue was discovered in SaltStack Salt before 3002.5
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2021-3148
9.8
8%
Feb 27
An issue was discovered in SaltStack Salt before 3002.5
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2021-25283
9.8
10%
Feb 27
An issue was discovered in through SaltStack Salt before 3002.5
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2021-25281
9.8
73%
Feb 27
An issue was discovered in through SaltStack Salt before 3002.5
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2020-25592
9.8
57%
Nov 6
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.11.0 before 2016.11.3; +8 more
CVE-2019-17361
9.8
15%
Jan 17
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection
Affected: through 2019.2.0
CVE-2018-15751
9.8
5%
Oct 24
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi)
Affected: before 2017.7.8; 2018.3.0 before 2018.3.3
CVE-2017-7893
9.8
1%
Apr 23
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master
Affected: before 2016.3.6
CVE-2017-14695
9.8
3%
Oct 24
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with…
Affected: through 2016.3.7; 2016.11; 2016.11.0; 2016.11.1; 2016.11.1; 2016.11.1; +9 more
CVE-2017-12791
9.8
5%
Aug 23
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to…
Affected: through 2016.11.6; 2017.7.0
CVE-2021-3144
9.1
5%
Feb 27
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2021-25282
9.1
92%
Feb 27
An issue was discovered in through SaltStack Salt before 3002.5
Affected: before 2015.8.10; 2015.8.11 before 2015.8.13; 2016.3.0 before 2016.3.4; 2016.3.5 before 2016.3.6; 2016.3.7 before 2016.3.8; 2016.3.9 before 2016.11.3; +9 more
CVE-2016-9639
9.1
3%
Feb 7
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching
Affected: through 2015.8.10
Showing 16