Approved changes feed: RSS · Atom

cpe:2.3:a:thycotic:secret_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThycotic (350c0171-3c00-5ab7-a178-7605442e9e67)
ProductSecret Server (e468f14b-bf2c-5360-bc58-d539efafaf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41845 vulnerable 2026-06-08 05:35:21.185455 Details available
A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 through 11.0.000006.
Published: 2021-10-01T18:14:44.000Z
Updated: 2024-08-04T03:22:25.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18357 vulnerable 2026-06-08 05:13:11.432987 Details available
An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).
Published: 2019-10-23T18:38:35.000Z
Updated: 2024-08-05T01:54:13.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18356 vulnerable 2026-06-08 05:13:11.432585 Details available
An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2).
Published: 2019-10-23T18:38:24.000Z
Updated: 2024-08-05T01:54:14.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18355 vulnerable 2026-06-08 05:13:11.432206 Details available
An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.
Published: 2019-10-23T18:38:15.000Z
Updated: 2024-08-05T01:54:14.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11725 vulnerable 2026-06-08 05:08:38.363195 Details available
The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.
Published: 2017-07-29T05:00:00.000Z
Updated: 2024-08-05T18:19:37.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4861 vulnerable 2026-06-08 05:05:46.261247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.