Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Securden Clear all filters
TI-2025-06118 CVE-2025-6737 · GHSA-j677-558j-pgrq

Securden Unified PAM Shared SSH Key and Cloud Infrastructure

Priority LOW 31

Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00272 Published 2025-08-25 Fixed in 11.3.1 CWE-1391
TI-2025-33110 CVE-2025-53120 · GHSA-cmv4-9rjr-99h2

Securden Unified PAM Path Traversal In File Upload

Priority HIGH 82

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on th…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.11676 Published 2025-08-25 No fix listed CWE-22
TI-2025-33109 CVE-2025-53119 · GHSA-m3jx-55q2-78px

Securden Unified PAM Unauthenticated Unrestricted File Upload

Priority HIGH 66

An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.14974 Published 2025-08-25 No fix listed CWE-434
TI-2025-33108 CVE-2025-53118 · GHSA-fq2g-f63j-9x36

Securden Unified PAM Authentication Bypass

Priority HIGH 75

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.35107 Published 2025-08-25 No fix listed CWE-306