CVE Program partner

Delinea

Delinea, Inc.

API
CVEs, 365 days811 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationDelinea, Inc.
RoleCNA
TypeVendor, Hosted Service, Researcher
Reports tomitre
ScopeVulnerabilities in Delinea products or services listed on <a href='https://www.delinea.com' target='_blank'>delinea.com</a>, or vulnerabilities in third-party products or services discovered by or reported to Delinea, unless covered by the scope of another CNA.
Advisorieshttps://trust.delinea.com/

Latest CVEs · RSS

  • CVE-2026-15640 2026-09-15 · CVSS 9.5
    Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
  • CVE-2026-15639 2026-09-15 · CVSS 9.3
    An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker.
  • CVE-2026-15638 2026-09-15 · CVSS 9.1
    An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. Th
  • CVE-2026-19117 2026-09-02 · CVSS 9.8
    Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This is
  • CVE-2026-2409 2026-02-19 · CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue a
  • CVE-2025-12812 2026-02-18 · CVSS 5.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Delinea Inc. Cloud Suite and Privileged Access Service. Remediation: T
  • CVE-2025-12811 2026-02-18 · CVSS 6.9
    Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using
  • CVE-2025-12810 2026-01-27 · CVSS 5.3
    Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11
  • CVE-2025-6942 2025-07-02 · CVSS 3.8
    The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that w
  • CVE-2025-6943 2025-07-02 · CVSS 3.8
    Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.
  • CVE-2024-12908 2024-12-26 · CVSS 6.9
    Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared

All CVE Program partners