Vault Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:hashicorp:vault_enterprise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3) |
|---|---|
| Product | Vault Enterprise (5ebd0016-c17c-5abc-b2b5-036ab2b79b31) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14886 |
vulnerable | 2026-09-16 04:33:12.065240 |
Vault Enterprise vulnerable to cross-namespace entity deletion
HIGH (8.2)
Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability (CVE-2026-14886) is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.
Published: 2026-08-10T18:57:13.545Z
Updated: 2026-08-12T18:04:39.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12624 |
vulnerable | 2026-09-16 04:32:50.720035 |
Vault vulnerable to LIST authorization bypass via trailing-slash strip
MEDIUM (4.3)
Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was intended to be denied access to. This vulnerability (CVE-2026-12624) is fixed in Vault Community Edition 2.0.3 and Vault Enterprise 2.0.3, 1.21.8, 1.20.13, and 1.19.19.
Published: 2026-08-10T17:00:46.283Z
Updated: 2026-08-11T15:52:34.653Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5051 |
vulnerable | 2026-07-29 01:03:18.154698 |
Audit Log Plugin Directory Guard Bypass via Legacy path Option
MEDIUM (4.4)
HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used.
This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.
Published: 2026-07-01T17:10:56.918Z
Updated: 2026-07-01T17:54:43.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5807 |
vulnerable | 2026-06-08 08:07:04.117525 |
Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
HIGH (7.5)
Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.
Published: 2026-04-17T03:22:13.816Z
Updated: 2026-07-15T00:41:55.881Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5052 |
vulnerable | 2026-06-08 08:07:02.939535 |
Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
MEDIUM (5.3)
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Published: 2026-04-17T02:55:25.080Z
Updated: 2026-04-17T17:57:55.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4525 |
vulnerable | 2026-06-08 08:05:13.481017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3605 |
vulnerable | 2026-06-08 08:01:19.047037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6203 |
vulnerable | 2026-06-08 07:43:14.530650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6037 |
vulnerable | 2026-06-08 07:43:14.162605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6015 |
vulnerable | 2026-06-08 07:43:13.975142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6014 |
vulnerable | 2026-06-08 07:43:13.974344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6013 |
vulnerable | 2026-06-08 07:43:13.973815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6011 |
vulnerable | 2026-06-08 07:43:13.968019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6004 |
vulnerable | 2026-06-08 07:43:13.953894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6000 |
vulnerable | 2026-06-08 07:43:13.941077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5999 |
vulnerable | 2026-06-08 07:37:26.235323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4656 |
vulnerable | 2026-06-08 07:29:17.028521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4166 |
vulnerable | 2026-06-08 07:29:15.504610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3879 |
vulnerable | 2026-06-08 07:23:10.063146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12044 |
vulnerable | 2026-06-08 07:04:29.602069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11621 |
vulnerable | 2026-06-08 07:04:28.623788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9180 |
vulnerable | 2026-06-08 07:00:26.853326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8365 |
vulnerable | 2026-06-08 07:00:24.373839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8185 |
vulnerable | 2026-06-08 07:00:22.976629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7594 |
vulnerable | 2026-06-08 06:58:22.806092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6468 |
vulnerable | 2026-06-08 06:58:19.538589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5798 |
vulnerable | 2026-06-08 06:56:17.454164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2877 |
vulnerable | 2026-06-08 06:35:27.584129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2660 |
vulnerable | 2026-06-08 06:33:31.852090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2048 |
vulnerable | 2026-06-08 06:33:30.203786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0831 |
vulnerable | 2026-06-08 06:22:02.943222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6337 |
vulnerable | 2026-06-08 06:19:46.978840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5954 |
vulnerable | 2026-06-08 06:19:45.202431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5077 |
vulnerable | 2026-06-08 06:19:41.375114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4680 |
vulnerable | 2026-06-08 06:16:14.139318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3775 |
vulnerable | 2026-06-08 06:09:40.528426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3774 |
vulnerable | 2026-06-08 06:09:40.524745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3462 |
vulnerable | 2026-06-08 06:09:39.628981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2197 |
vulnerable | 2026-06-08 06:02:41.601233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2121 |
vulnerable | 2026-06-08 06:02:41.455227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25000 |
vulnerable | 2026-06-08 05:56:08.312419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24999 |
vulnerable | 2026-06-08 05:56:08.310348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0665 |
vulnerable | 2026-06-08 05:52:32.231701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0620 |
vulnerable | 2026-06-08 05:52:32.092563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.