How many hashicorp vault CVEs are in CISA KEV?

None of hashicorp vault's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of hashicorp vault are affected?

846 distinct hashicorp vault versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in hashicorp vault CVEs?

hashicorp vault's CVEs most often map to these CWE weakness types: CWE-266 (Incorrect Privilege Assignment), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-532 (Insertion of Sensitive Information into Log File), CWE-863 (Incorrect Authorization).

How many critical hashicorp vault vulnerabilities are there?

hashicorp vault has 10 critical and 29 high-severity CVEs.

What is the average severity of hashicorp vault CVEs?

The average CVSS base score across hashicorp vault's scored CVEs is 7.0.

hashicorp vault Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

hashicorp vault has 75 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting hashicorp vault, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include arm, linux, macos, windows, x64, x86.

Severity and exploitation

How the CVSS severity of hashicorp vault's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical10

High29

Medium33

Low3

In CISA’s Known Exploited Vulnerabilities catalog

None of hashicorp vault's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of hashicorp vault's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every hashicorp vault version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

api/v1.0.149 CVEs
api/v1.0.249 CVEs
api/v1.0.349 CVEs
api/v1.0.449 CVEs
sdk/v0.1.1049 CVEs
sdk/v0.1.1149 CVEs
sdk/v0.1.1249 CVEs
sdk/v0.1.1349 CVEs
sdk/v0.1.849 CVEs
sdk/v0.1.949 CVEs
0.11.246 CVEs
1.2.046 CVEs

Frequently asked questions

Common questions about hashicorp vault vulnerabilities.

How many CVEs does hashicorp vault have?: hashicorp vault has 75 published CVE records since 2018.
How many hashicorp vault CVEs are in CISA KEV?: None of hashicorp vault's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for hashicorp vault vulnerabilities?: Yes — 3 of hashicorp vault's CVEs have a known public exploit.
Which versions of hashicorp vault are affected?: 846 distinct hashicorp vault versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in hashicorp vault CVEs?: hashicorp vault's CVEs most often map to these CWE weakness types: CWE-266 (Incorrect Privilege Assignment), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-532 (Insertion of Sensitive Information into Log File), CWE-863 (Incorrect Authorization).
How many critical hashicorp vault vulnerabilities are there?: hashicorp vault has 10 critical and 29 high-severity CVEs.
What is the average severity of hashicorp vault CVEs?: The average CVSS base score across hashicorp vault's scored CVEs is 7.0.

hashicorp vault Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other hashicorp products

Frequently asked questions

References

Track hashicorp vault vulnerabilities

Version ranges

Fixed in