Thycotic vulnerabilities

Products

• Secret Server 8

Newest

• thycotic secret server A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. CVE-2021-41845 6.5 MediumOctober 1, 2021
• thycotic password reset server Thycotic Password Reset Server before 5.3.0 allows credential disclosure. CVE-2021-34679 10.0 CriticalJune 11, 2021
• thycotic secret server An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2). CVE-2019-18357 6.1 MediumOctober 23, 2019
• thycotic secret server An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2). CVE-2019-18356 6.1 MediumOctober 23, 2019
• thycotic secret server An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7. CVE-2019-18355 9.8 CriticalOctober 23, 2019
• thycotic secret server The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup... CVE-2014-4861 9.8 CriticalMarch 9, 2018
• thycotic secret server The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button,... CVE-2017-11725 5.4 MediumJuly 29, 2017
• thycotic secret server Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x,... CVE-2015-3443 Public exploit 3.5 LowJuly 2, 2015
• thycotic secret server The Thycotic Password Manager Secret Server application through 2.3 for iOS does not verify X.509... CVE-2015-4094 5.8 MediumJune 2, 2015