Secret Server (On Prem)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:delinea:secret_server_(on-prem):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDelinea (c1fd2206-04f3-5726-8f1a-a84dd6dd15d5)
ProductSecret Server (On Prem) (64556264-74f8-587e-9e45-4136c09f8f85)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15638 vulnerable 2026-09-16 04:33:06.961237 Cryptographic Padding Oracle
An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.
Published: 2026-09-15T23:20:56.216Z
Updated: 2026-09-16T19:36:54.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15639 vulnerable 2026-09-16 04:33:06.661017 Reflected Cross-Site Scripting
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.
Published: 2026-09-15T23:21:38.473Z
Updated: 2026-09-16T19:37:19.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15640 vulnerable 2026-09-16 04:33:06.286350 Authentication Bypass via SAML Response Manipulation
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
Published: 2026-09-15T23:22:15.196Z
Updated: 2026-09-16T19:37:42.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.