Vendors / Thycotic Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Thycotic records in CISA KEV No Thycotic vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01514 · Published 2019-10-23 · No fix listed CWE-918
Priority MEDIUM 44
The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01169 · Published 2018-03-09 · No fix listed CWE-255
Priority LOW 30
A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0068 · Published 2021-10-01 · No fix listed CWE-89
Priority LOW 29
An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00785 · Published 2019-10-23 · No fix listed CWE-79
Priority LOW 29
An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00789 · Published 2019-10-23 · No fix listed CWE-79
Priority LOW 27
The Thycotic Password Manager Secret Server application through 2.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information…
CVSS 2.0 MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.0059 · Published 2015-06-02 · No fix listed CWE-295
Priority LOW 25
The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00567 · Published 2017-07-29 · No fix listed CWE-601
Priority LOW 21
Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated users to inject arbitrary web script or HTML via a password…
CVSS 2.0 LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.0198 · Published 2015-07-02 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 0 5 1 0
THREATIST.IORead the docs