Read the docs

HYPR

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

HYPR records in CISA KEV

No HYPR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Workforce Access 8 records MEDIUM Hypr Server 4 records MEDIUM Hypr 1 record LOW Keycloak Authenticator 1 record MEDIUM

Records

4 records in Hypr Server · all components

TI-2023-01725 CVE-2023-1837 · GHSA-vhrm-3gmw-7rpc

Missing authentication in HYPR Server

Priority MEDIUM 41

Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs)

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00548 Published 2023-05-23 Fixed in 8.0 CWE-306
TI-2022-02030 CVE-2022-2193 · GHSA-v6fx-fw28-5wwr

Authorization bypass in HYPR Server

Priority MEDIUM 40

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager p…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00999 Published 2022-07-19 Fixed in 6.14.1 CWE-280
TI-2024-07669 CVE-2024-8273 · GHSA-2jg8-5xcc-qjcx

Authentication bypass by spoofing in HYPR Server

Priority LOW 31

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00311 Published 2025-12-11 Fixed in 10.1 CWE-290
Open these records in search →