Read the docs

BeyondTrust

Records40All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

BeyondTrust records in CISA KEV
TI-2026-74999 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 99KEV 2026-10-16TI-2026-01414 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Priority CRITICAL 100KEV 2026-02-13TI-2024-11765 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability Priority CRITICAL 91KEV 2025-01-13TI-2024-11463 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability Priority CRITICAL 100KEV 2024-12-19TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06

Components

Products in the NVD configurations · select one to filter the records
Privilege Management For Windows 12 records LOW Privileged Remote Access 11 records CRITICAL Remote Support 11 records CRITICAL Beyondinsight 2 records LOW Beyondinsight Password Safe 2 records LOW Privilege Management For Mac 2 records CRITICAL U-series Appliance 2 records LOW Appliance Base Software 1 record MEDIUM

Records

2 records in Beyondinsight Password Safe · all components

TI-2024-05390 CVE-2024-5813 · GHSA-4p3j-h7w5-q76v

SSH Private Key Leak in BeyondInsight PasswordSafe

Priority LOW 27

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.00406 Published 2024-06-11 Fixed in 23.3.0.929 CWE-200
TI-2024-05389 CVE-2024-5812 · GHSA-x47x-f96m-j7gv

Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe

Priority LOW 16

A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00266 Published 2024-06-11 Fixed in 24.1.1, 23.3.0.959 +1 CWE-290
Open these records in search →