entrust records

19 published records for vendor entrust.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 68.4%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

19 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-59693No exploit	The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) entrust · nshield 5c firmware · CWE-269 Pre-auth	Critical9.8	—	0.9%	Dec 2, 2025
39Monitor	CVE-2025-59695No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user entrust · nshield 5c firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.7%	Dec 2, 2025
36Monitor	CVE-2025-59703No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physientrust · nshield 5c firmware · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Dec 2, 2025
33Monitor	CVE-2024-34329Proof of concept	Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticatedCWE-277 RCE	High8.4	—	0.6%	Jul 22, 2024
31Monitor	CVE-2004-0369No exploit	Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gatewaentrust · entrust libkmp isakmp library pre-auth RCE	High7.5	—	4.4%	Dec 31, 2004
31Monitor	CVE-2001-1024No exploit	login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, bentrust · getaccess Pre-auth	High7.5	—	2.2%	Jul 27, 2001
28Monitor	CVE-2025-59702No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield 5c firmware · CWE-203	High7.2	—	0.3%	Dec 2, 2025
28Monitor	CVE-2025-59697No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield 5c firmware · CWE-269	High7.2	—	0.3%	Dec 2, 2025
27Monitor	CVE-2025-59699No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield 5c firmware · CWE-290 Auth bypass	Medium6.8	—	0.3%	Dec 2, 2025
27Monitor	CVE-2025-59698No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow aentrust · nshield 5c firmware · CWE-1270	Medium6.8	—	0.3%	Dec 2, 2025
27Monitor	CVE-2025-59705No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physientrust · nshield 5c firmware · CWE-269	Medium6.8	—	0.3%	Dec 2, 2025
27Monitor	CVE-2025-59694No exploit	The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) entrust · nshield 5c firmware · CWE-1274	Medium6.8	—	0.3%	Dec 2, 2025
25Monitor	CVE-2007-4594No exploit	Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that oentrust · entelligence security provider · CWE-255 Pre-auth	Medium6.4	—	0.6%	Aug 29, 2007
21Monitor	CVE-2001-0853No exploit	Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a ..entrust · getaccess Pre-auth Path traversal	Medium5.0	—	3.9%	Dec 6, 2001
18Monitor	CVE-2025-59704No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attaentrust · nshield 5c firmware · CWE-287 Auth bypass	Medium4.6	—	0.3%	Dec 2, 2025
16Monitor	CVE-2025-59701No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield connect xc high firmware · CWE-312	Medium4.1	—	0.2%	Dec 2, 2025
15Monitor	CVE-2025-59700No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield 5c firmware · CWE-345	Low3.9	—	0.2%	Dec 2, 2025
12Monitor	CVE-2025-59696No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physientrust · nshield 5c firmware · CWE-1263	Low3.2	—	0.2%	Dec 2, 2025
10Monitor	CVE-2002-0712No exploit	Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, whichentrust · entrust authority security manager Denial of service	Low2.1	—	5.3%	Feb 3, 2004

CVE-2025-59693
39Monitor
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59695
39Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59703
36Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physi
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
entrust · nshield 5c firmwareDec 2, 2025
CVE-2024-34329
33Monitor
Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated
HighCVSS 8.4Proof of conceptEPSS 1%
- RCE
Jul 22, 2024
CVE-2004-0369
31Monitor
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gatewa
HighCVSS 7.5No exploitEPSS 4%
- pre-auth RCE
entrust · entrust libkmp isakmp libraryDec 31, 2004
CVE-2001-1024
31Monitor
login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, b
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
entrust · getaccessJul 27, 2001
CVE-2025-59702
28Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
HighCVSS 7.2No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59697
28Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
HighCVSS 7.2No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59699
27Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
MediumCVSS 6.8No exploitEPSS 0%
- Auth bypass
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59698
27Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a
MediumCVSS 6.8No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59705
27Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physi
MediumCVSS 6.8No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59694
27Monitor
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)
MediumCVSS 6.8No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2007-4594
25Monitor
Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that o
MediumCVSS 6.4No exploitEPSS 1%
- Pre-auth
entrust · entelligence security providerAug 29, 2007
CVE-2001-0853
21Monitor
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a ..
MediumCVSS 5.0No exploitEPSS 4%
- Pre-auth
- Path traversal
entrust · getaccessDec 6, 2001
CVE-2025-59704
18Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an atta
MediumCVSS 4.6No exploitEPSS 0%
- Auth bypass
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59701
16Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
MediumCVSS 4.1No exploitEPSS 0%
entrust · nshield connect xc high firmwareDec 2, 2025
CVE-2025-59700
15Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
LowCVSS 3.9No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2025-59696
12Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi
LowCVSS 3.2No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2002-0712
10Monitor
Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which
LowCVSS 2.1No exploitEPSS 5%
- Denial of service
entrust · entrust authority security managerFeb 3, 2004