Delinea Secret Server

• CVE-2025-6942 Low 3.8 The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate an 0.1%
• CVE-2025-6943 Low 3.8 Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. 0.2%
• CVE-2024-12908 Medium 6.9 Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalization and canonicalizati 0.7%
• CVE-2024-25652 High 7.6 In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE (with access to the Report fun 0.6%
• CVE-2023-4589 Critical 9.1 Insufficient verification of data authenticity vulnerability in Delinea Secret Server 0.3%
• CVE-2023-4588 Medium 6.8 File accessibility vulnerability in Delinea Secret Server 0.3%