Veille CVE

Recherche « Delinea Secret Server (On-Prem) »

4 CVE

Critique 4 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Delinea Secret Server (On-Prem) » ✕
  1. CVE-2026-15640 9.5 Critique

    Delinea Secret Server (On-Prem)

    Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.

  2. CVE-2026-15639 9.3 Critique

    Delinea Secret Server (On-Prem)

    An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.

  3. CVE-2026-15638 9.1 Critique

    Delinea Secret Server (On-Prem)

    An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

  4. CVE-2026-19117 9.8 Critique

    Delinea Secret Server (On-Prem)

    Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.