İçeriğe atla
Noroxi

BeyondTrust kayıtları

BeyondTrust üreticisine ait 37 yayımlanmış kayıt. Bunların 5 tanesi sahada sömürüldü (CISA KEV listesinde), 5 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
5 · %13,5
Silahlaştırılmış
5 · %13,5
Pre-auth RCE
4
Düzeltme kaydı olan
%10,8
Yayından KEV’e ortanca
7 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

37 kayıt
  • CVE-2026-1731
    97Hemen

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %93

    beyondtrust · privileged remote access6 Şub 2026

  • CVE-2024-12356
    95Hemen

    Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %87

    beyondtrust · privileged remote access17 Ara 2024

  • CVE-2021-3156
    91Hemen

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    sudo project · sudo26 Oca 2021

  • CVE-2026-102764
    91Hemen

    Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %79

    beyondtrust · remote support15 Eki 2026

  • CVE-2024-12686
    68Bu hafta

    Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %32

    beyondtrust · privileged remote access18 Ara 2024

  • CVE-2023-4310
    40Planlayın

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability whic

    KritikCVSS 9,8İstismar yokEPSS %1

    beyondtrust · privileged remote access5 Eyl 2023

  • CVE-2026-40139
    36İzleyin

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    KritikCVSS 9,2İstismar yokEPSS %0

    beyondtrust · privileged remote access6 Tem 2026

  • CVE-2026-40138
    36İzleyin

    Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    KritikCVSS 9,2İstismar yokEPSS %0

    beyondtrust · privileged remote access6 Tem 2026

  • CVE-2024-4219
    36İzleyin

    SSRF In BeyondInsight

    KritikCVSS 9,1İstismar yokEPSS %0

    beyondtrust · beyondinsight4 Haz 2024

  • CVE-2020-12613
    35İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    YüksekCVSS 8,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows11 Ara 2023

  • CVE-2021-3187
    35İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7.

    YüksekCVSS 8,8İstismar yokEPSS %0

    beyondtrust · privilege management for mac11 Ara 2023

  • CVE-2025-5309
    34İzleyin

    Remote Support & Privileged Remote Access server side template injection

    YüksekCVSS 8,6İstismar yokEPSS %1

    beyondtrust · privileged remote access16 Haz 2025

  • CVE-2026-40140
    34İzleyin

    High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

    YüksekCVSS 8,7İstismar yokEPSS %0

    beyondtrust · privileged remote access6 Tem 2026

  • CVE-2026-40141
    34İzleyin

    High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

    YüksekCVSS 8,5İstismar yokEPSS %0

    beyondtrust · privileged remote access6 Tem 2026

  • CVE-2021-31589
    32İzleyin

    A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1

    OrtaCVSS 6,1Kavram kanıtıEPSS %25

    beyondtrust · appliance base software5 Oca 2022

  • CVE-2017-5996
    31İzleyin

    The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak

    YüksekCVSS 7,8İstismar yokEPSS %1

    beyondtrust · remote support26 Eki 2017

  • CVE-2021-42254
    31İzleyin

    BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows19 Kas 2021

  • CVE-2020-12612
    31İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows12 Ara 2023

  • CVE-2020-28369
    31İzleyin

    In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the use

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows12 Ara 2023

  • CVE-2020-12615
    31İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows12 Ara 2023

  • CVE-2023-23632
    31İzleyin

    BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privileged remote access12 Eki 2023

  • CVE-2024-4018
    31İzleyin

    Privilege Escalation in U-Series Appliance

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · u-series appliance19 Nis 2024

  • CVE-2024-4017
    31İzleyin

    Privilege Escalation in U-Series Appliance

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · u-series appliance19 Nis 2024

  • CVE-2020-12614
    31İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows12 Ara 2023

  • CVE-2024-25083
    31İzleyin

    An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1.

    YüksekCVSS 7,8İstismar yokEPSS %0

    beyondtrust · privilege management for windows16 Şub 2024