İçeriğe atla
Noroxi

openbao kayıtları

openbao üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 24
  2. 25
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2024-2048
    39İzleyin

    Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

    KritikCVSS 9,8İstismar yokEPSS %0

    hashicorp · vault4 Mar 2024

  • CVE-2026-33758
    37İzleyin

    OpenBao has Reflected XSS in its OIDC authentication error message

    KritikCVSS 9,4İstismar yokEPSS %0

    openbao · openbao27 Mar 2026

  • CVE-2025-54997
    36İzleyin

    OpenBao: Privileged Operator May Execute Code on the Underlying Host

    KritikCVSS 9,1İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2024-7594
    35İzleyin

    Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default

    YüksekCVSS 8,8İstismar yokEPSS %0

    hashicorp · vault26 Eyl 2024

  • CVE-2026-33757
    33İzleyin

    OpenBao lacks user confirmation for OIDC direct callback mode

    YüksekCVSS 8,3İstismar yokEPSS %0

    openbao · openbao27 Mar 2026

  • CVE-2025-59048
    32İzleyin

    OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

    YüksekCVSS 8,1İstismar yokEPSS %0

    openbao · aws plugin23 Eki 2025

  • CVE-2025-59043
    30İzleyin

    OpenBao vulnerable to denial of service via malicious JSON request processing

    YüksekCVSS 7,5İstismar yokEPSS %0

    openbao · openbao17 Eki 2025

  • CVE-2024-8185
    30İzleyin

    Vault Vulnerable to Denial of Service When Processing Raft Join Requests

    YüksekCVSS 7,5İstismar yokEPSS %0

    hashicorp · vault31 Eki 2024

  • CVE-2025-64761
    30İzleyin

    OpenBao Privileged Operator Identity Group Root Escalation

    YüksekCVSS 7,5İstismar yokEPSS %0

    openbao · openbao24 Kas 2025

  • CVE-2024-9180
    28İzleyin

    Vault Operators in Root Namespace May Elevate Their Privileges

    YüksekCVSS 7,2İstismar yokEPSS %0

    openbao · openbao10 Eki 2024

  • CVE-2025-54996
    28İzleyin

    OpenBao Root Namespace Operator May Elevate Token Privileges

    YüksekCVSS 7,2İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2025-52894
    27İzleyin

    OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation

    OrtaCVSS 6,9İstismar yokEPSS %0

    openbao · openbao25 Haz 2025

  • CVE-2025-4166
    26İzleyin

    Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin

    OrtaCVSS 6,5İstismar yokEPSS %0

    hashicorp · vault2 May 2025

  • CVE-2026-39396
    26İzleyin

    OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)

    OrtaCVSS 6,5İstismar yokEPSS %0

    openbao · openbao20 Nis 2026

  • CVE-2025-55001
    26İzleyin

    OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias

    OrtaCVSS 6,5İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2025-55000
    26İzleyin

    OpenBao TOTP Secrets Engine Enables Code Reuse

    OrtaCVSS 6,5İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2025-62705
    22İzleyin

    OpenBao and Vault Leak []byte Fields in Audit Logs

    OrtaCVSS 5,7İstismar yokEPSS %0

    openbao · openbao22 Eki 2025

  • CVE-2025-62513
    22İzleyin

    OpenBao leaks HTTPRawBody in Audit Logs

    OrtaCVSS 5,7İstismar yokEPSS %0

    openbao · openbao22 Eki 2025

  • CVE-2025-55003
    22İzleyin

    OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse

    OrtaCVSS 5,7İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2025-54998
    21İzleyin

    OpenBao Userpass and LDAP User Lockout Bypass

    OrtaCVSS 5,3İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2026-39946
    18İzleyin

    OpenBao allows SQL Injection in PostgreSQL database secrets engine

    OrtaCVSS 4,6İstismar yokEPSS %0

    openbao · openbao20 Nis 2026

  • CVE-2025-52893
    18İzleyin

    OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data

    OrtaCVSS 4,5İstismar yokEPSS %0

    openbao · openbao25 Haz 2025

  • CVE-2025-54999
    14İzleyin

    OpenBao: Timing Side-Channel in Userpass Auth Method

    DüşükCVSS 3,7İstismar yokEPSS %0

    openbao · openbao8 Ağu 2025

  • CVE-2026-42186
    9İzleyin

    OpenBao's Namespace Deletion May Not Delete Data Properly

    DüşükCVSS 2,3İstismar yokEPSS %0

    openbao · openbao14 May 2026

  • CVE-2026-40264
    8İzleyin

    OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

    DüşükCVSS 2,0İstismar yokEPSS %0

    openbao · openbao20 Nis 2026