Core Privileged Access Manager (Boks)
Approved changes feed: RSS · Atom
cpe:2.3:a:fortra:core_privileged_access_manager_(boks):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortra (f14f6bd1-8bf2-53f9-b0d6-b2745f517ba7) |
|---|---|
| Product | Core Privileged Access Manager (Boks) (77134c5b-184c-554a-ae40-6c1e18bffb3a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9863 |
vulnerable | 2026-07-29 01:12:09.723449 |
Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability
HIGH (7.5)
Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.
Published: 2026-06-15T15:17:19.607Z
Updated: 2026-06-15T16:08:58.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9862 |
vulnerable | 2026-07-29 01:12:09.723144 |
Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability
CRITICAL (9.8)
Fortra's
Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.
Published: 2026-06-15T15:10:08.708Z
Updated: 2026-06-15T16:09:28.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5141 |
vulnerable | 2026-06-08 07:35:24.247904 |
Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache
MEDIUM (5.5)
A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0.0 (up to 9.0.0.1) and also legacy tar installs of BoKS 7.2 without hotfix #0474 on Linux, AIX, and Solaris allows low privilege local users to dump data from the cache.
Published: 2025-06-17T19:30:51.781Z
Updated: 2025-08-29T20:11:13.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13532 |
vulnerable | 2026-06-08 07:04:32.458405 |
Weak Password Hash in Core Privileged Access Manager (BoKS)
MEDIUM (6.2)
Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms. This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.
Published: 2025-12-16T20:01:02.743Z
Updated: 2025-12-16T20:23:51.768Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.