TI-2020-10034 CVE-2020-12613 · GHSA-5jjx-mxcx-8c3v
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
Priority LOW 39
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
BeyondTrust
Records40All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9
Exploited now
BeyondTrust records in CISA KEVTI-2026-74999 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability TI-2026-01414 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability TI-2024-11765 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability TI-2024-11463 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Privilege Management For Windows · all components
TI-2020-10035 CVE-2020-12614 · GHSA-2h32-h397-qgv2
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
Priority LOW 37
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
TI-2024-16542 CVE-2024-25083 · GHSA-q37f-r342-4gq8
An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1.
Priority LOW 35
An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1.
TI-2020-10036 CVE-2020-12615 · GHSA-hrh7-rq69-242h
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
Priority LOW 35
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
TI-2021-18693 CVE-2021-42254 · GHSA-959q-hg7j-486g
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a…
Priority LOW 34
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.
TI-2020-17207 CVE-2020-28369 · GHSA-7fw8-2j3x-v679
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM…
Priority LOW 34
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
TI-2020-10033 CVE-2020-12612 · GHSA-j69j-38vv-w2h9
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
Priority LOW 34
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
TI-2025-02017 CVE-2025-2297 · GHSA-96m4-p356-68w4
Privilege Management for Windows - Elevation of Privilege
Priority LOW 31
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions.
TI-2025-00755 CVE-2025-0889 · GHSA-3w65-g885-345g
Privilege Management for Windows – Elevation of Privilege
Priority LOW 31
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows…
TI-2025-05653 CVE-2025-6250 · GHSA-vxhp-fm7f-3jrp
Privilege Management for Windows - Elevation of Privilege
Priority LOW 30
Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections.
TI-2023-27307 CVE-2023-49944 · GHSA-9rg4-33x9-wfrh
The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW)…
Priority LOW 29
The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared…
TI-2024-01485 CVE-2024-1591 · GHSA-fg82-j7qh-mwr5
Privilege Management for Windows < 24.1 Information Leak
Priority LOW 15
Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy.