Hashicorp Vault Enterprise

Name: Hashicorp Vault Enterprise
Brand: Hashicorp

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

9critical9high9medium0low

updated 2026-10-28

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-10661US	critical9.1	1.12% (66th)	—	no fix	2020-03-23	0.11.0 → 1.3.3
CVE-2025-6000US	—	0.95% (61st)	—	no fix	2025-08-01	4 versions
CVE-2024-53915US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53914US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53913US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53912US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53911US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53910US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2024-53909US	critical9.8	0.94% (61st)	—	no fix	2024-11-24	10 versions
CVE-2023-6337US	high7.5	0.79% (56th)	—	no fix	2023-12-08	3 versions
CVE-2025-6203US	—	0.73% (54th)	—	1.21.2	2025-08-28	5 versions
CVE-2023-5954US	high7.5	0.72% (54th)	—	no fix	2023-11-09	3 versions
CVE-2026-5807US	—	0.72% (54th)	—	2.0.0.	2026-04-17	2 versions
CVE-2025-6013US	high8.1	0.53% (45th)	—	1.20.2	2025-08-06	5 versions
CVE-2025-12044US	—	0.53% (45th)	—	1.16.27	2025-10-23	8 versions
CVE-2024-9180US	high7.2	0.53% (44th)	—	no fix	2024-10-10	3 versions
CVE-2022-41316US	medium5.3	0.52% (44th)	—	no fix	2022-10-12	4 versions
CVE-2025-5999US	—	0.51% (43rd)	—	no fix	2025-08-01	4 versions
CVE-2024-6468US	—	0.49% (42nd)	—	no fix	2024-07-11	3 versions
CVE-2025-11621US	—OT elevated	0.49% (42nd)	—	1.21.0	2025-10-23	5 versions
CVE-2024-8185US	—	0.48% (41st)	—	no fix	2024-10-31	3 versions
CVE-2024-8365US	medium6.5	0.46% (39th)	—	no fix	2024-09-02	2 versions
CVE-2024-2048US	critical9.8	0.45% (39th)	—	no fix	2024-03-04	2 versions
CVE-2025-4166US	medium6.5	0.45% (39th)	—	no fix	2025-05-02	4 versions
CVE-2025-6004US	—	0.45% (39th)	—	no fix	2025-08-01	4 versions
CVE-2023-4680US	medium6.8	0.44% (38th)	—	no fix	2023-09-15	3 versions
CVE-2025-3879US	high8.8OT elevated	0.44% (38th)	—	no fix	2025-05-02	4 versions
CVE-2023-2121US	medium5.4	0.42% (36th)	—	no fix	2023-06-09	4 versions
CVE-2026-4525US	high8.8	0.41% (35th)	—	2.0.0	2026-04-17	5 versions
CVE-2026-5051US	—	0.38% (32nd)	—	2.0.1	2026-07-01	1.19.0 → 2.0.1
CVE-2023-0620US	medium6.7	0.38% (32nd)	—	no fix	2023-03-30	3 versions
CVE-2026-3605US	—OT elevated	0.38% (31st)	—	2.0.0	2026-04-17	5 versions
CVE-2026-5052US	high8.6	0.34% (28th)	—	2.0.0	2026-04-17	8 versions
CVE-2024-5798US	high7.5	0.34% (28th)	—	1.16.2	2024-06-12	0.11.0 → 1.16.2
CVE-2023-0665US	medium6.5	0.33% (26th)	—	no fix	2023-03-30	3 versions
CVE-2026-14886US	—OT elevated	0.33% (26th)	—	2.0.4	2026-08-10	2.0.0 → 2.0.4
CVE-2024-2660US	medium6.8	0.30% (23rd)	—	no fix	2024-04-04	3 versions
CVE-2026-12624US	—OT elevated	0.27% (19th)	—	2.0.3	2026-08-10	0 → 2.0.3
CVE-2024-7594US	high8.8	0.27% (19th)	—	no fix	2024-09-26	3 versions
CVE-2025-4656US	—	0.27% (18th)	—	no fix	2025-06-25	5 versions
CVE-2025-6037US	—	0.26% (17th)	—	1.20.1	2025-08-01	5 versions
CVE-2023-25000US	medium4.7	0.21% (11th)	—	no fix	2023-03-30	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data7 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-636Not Failing Securely ('Failing Open')2 CVEs
CWE-703Improper Check or Handling of Exceptional Conditions2 CVEs

sources (2)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)38 CVEs
EUEU Vulnerability Database (ENISA)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan