Read the docs

BeyondTrust

Records40All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

BeyondTrust records in CISA KEV
TI-2026-74999 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 99KEV 2026-10-16TI-2026-01414 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Priority CRITICAL 100KEV 2026-02-13TI-2024-11765 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability Priority CRITICAL 91KEV 2025-01-13TI-2024-11463 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability Priority CRITICAL 100KEV 2024-12-19TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06

Components

Products in the NVD configurations · select one to filter the records
Privilege Management For Windows 12 records LOW Privileged Remote Access 11 records CRITICAL Remote Support 11 records CRITICAL Beyondinsight 2 records LOW Beyondinsight Password Safe 2 records LOW Privilege Management For Mac 2 records CRITICAL U-series Appliance 2 records LOW Appliance Base Software 1 record MEDIUM

Records

2 records in Beyondinsight · all components

TI-2024-03925 CVE-2024-4219 · GHSA-wr7j-7cg5-p3pv

SSRF In BeyondInsight

Priority LOW 39

Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00216 Published 2024-06-04 Fixed in 23.2 CWE-918
TI-2024-03926 CVE-2024-4220 · GHSA-9fr6-vrhc-9hmv

Information Disclosure in BeyondInsight

Priority LOW 24

Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2024-06-04 Fixed in 23.1 CWE-200
Open these records in search →