Approved changes feed: RSS · Atom
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
part: a version: * update: *
| Vendor | Hashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3) |
|---|---|
| Product | Vault (4dadab3d-054a-5498-9618-09dfc641ef81) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/hashicorp/vault/ |
purl2cpe | 2026-06-01 10:14:57.427337 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5807 |
vulnerable | 2026-06-08 08:07:04.117696 |
Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
HIGH (7.5)
Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.
Published: 2026-04-17T03:22:13.816Z
Updated: 2026-07-15T00:41:55.881Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5052 |
vulnerable | 2026-06-08 08:07:02.940479 |
Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
MEDIUM (5.3)
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Published: 2026-04-17T02:55:25.080Z
Updated: 2026-04-17T17:57:55.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4525 |
vulnerable | 2026-06-08 08:05:13.482540 |
Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header
HIGH (7.5)
If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Published: 2026-04-17T03:00:47.561Z
Updated: 2026-07-15T00:52:47.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3605 |
vulnerable | 2026-06-08 08:01:19.048045 |
Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service
HIGH (8.1)
An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete secrets across namespaces, nor read any secret data. Fxed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Published: 2026-04-17T02:44:42.032Z
Updated: 2026-07-15T01:02:36.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6203 |
vulnerable | 2026-06-08 07:43:14.530680 |
Vault unauthenticated denial of service through complex json payload
HIGH (7.5)
A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25.
Published: 2025-08-28T19:36:09.870Z
Updated: 2025-10-23T18:18:34.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6037 |
vulnerable | 2026-06-08 07:43:14.162636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6015 |
vulnerable | 2026-06-08 07:43:13.975171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6014 |
vulnerable | 2026-06-08 07:43:13.974369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6013 |
vulnerable | 2026-06-08 07:43:13.973847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6011 |
vulnerable | 2026-06-08 07:43:13.968048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6004 |
vulnerable | 2026-06-08 07:43:13.953924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6000 |
vulnerable | 2026-06-08 07:43:13.942056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5999 |
vulnerable | 2026-06-08 07:37:26.236071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4656 |
vulnerable | 2026-06-08 07:29:17.028658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4166 |
vulnerable | 2026-06-08 07:29:15.505692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3879 |
vulnerable | 2026-06-08 07:23:10.070976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12044 |
vulnerable | 2026-06-08 07:04:29.602101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11621 |
vulnerable | 2026-06-08 07:04:28.624957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9180 |
vulnerable | 2026-06-08 07:00:26.853290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8365 |
vulnerable | 2026-06-08 07:00:24.373876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8185 |
vulnerable | 2026-06-08 07:00:22.972992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7594 |
vulnerable | 2026-06-08 06:58:22.807528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6468 |
vulnerable | 2026-06-08 06:58:19.540353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5798 |
vulnerable | 2026-06-08 06:56:17.456026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2877 |
vulnerable | 2026-06-08 06:35:27.585289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2660 |
vulnerable | 2026-06-08 06:33:31.852122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2048 |
vulnerable | 2026-06-08 06:33:30.205306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0831 |
vulnerable | 2026-06-08 06:22:02.944369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6337 |
vulnerable | 2026-06-08 06:19:46.978870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5954 |
vulnerable | 2026-06-08 06:19:45.202491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5077 |
vulnerable | 2026-06-08 06:19:41.374474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4680 |
vulnerable | 2026-06-08 06:16:14.140356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3775 |
vulnerable | 2026-06-08 06:09:40.528465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3462 |
vulnerable | 2026-06-08 06:09:39.630452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2197 |
vulnerable | 2026-06-08 06:02:41.601271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2121 |
vulnerable | 2026-06-08 06:02:41.456761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25000 |
vulnerable | 2026-06-08 05:56:08.312573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24999 |
vulnerable | 2026-06-08 05:56:08.311557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0665 |
vulnerable | 2026-06-08 05:52:32.231930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0620 |
vulnerable | 2026-06-08 05:52:32.094176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41316 |
vulnerable | 2026-06-08 05:48:30.246166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40186 |
vulnerable | 2026-06-08 05:48:24.130001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30689 |
vulnerable | 2026-06-08 05:43:38.776993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25244 |
vulnerable | 2026-06-08 05:41:45.601872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25243 |
vulnerable | 2026-06-08 05:41:45.601440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45042 |
vulnerable | 2026-06-08 05:36:47.724824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43998 |
vulnerable | 2026-06-08 05:36:44.723743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42135 |
vulnerable | 2026-06-08 05:35:21.905293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41802 |
vulnerable | 2026-06-08 05:35:21.060037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3024 |
vulnerable | 2026-06-08 05:33:50.673816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38554 |
vulnerable | 2026-06-08 05:33:47.867437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38553 |
vulnerable | 2026-06-08 05:33:47.866776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32923 |
vulnerable | 2026-06-08 05:32:08.198331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29653 |
vulnerable | 2026-06-08 05:31:26.694624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27668 |
vulnerable | 2026-06-08 05:31:22.040295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27400 |
vulnerable | 2026-06-08 05:31:21.345549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7220 |
vulnerable | 2026-06-08 05:27:12.625301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35453 |
vulnerable | 2026-06-08 05:25:01.098735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35177 |
vulnerable | 2026-06-08 05:25:00.897633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25816 |
vulnerable | 2026-06-08 05:23:49.468563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25594 |
vulnerable | 2026-06-08 05:22:36.883441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16251 |
vulnerable | 2026-06-08 05:19:27.850418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16250 |
vulnerable | 2026-06-08 05:19:27.849904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13223 |
vulnerable | 2026-06-08 05:18:00.340328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12757 |
vulnerable | 2026-06-08 05:17:59.029726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10661 |
vulnerable | 2026-06-08 05:16:35.470335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10660 |
vulnerable | 2026-06-08 05:16:35.469883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.