Secret Server
Vendor:
First CVE: Sep 6, 2023 · Active for 2 years
12
Total CVEs
More Total CVEs than 90% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Secret Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 6, 2023
2 years ago
Most Recent CVE
Jan 27, 2026
179 days ago
CVE Severity & Scoring
Secret Server12 CVEs
8%
58%
33%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local3 (25.0%)
Network9 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (75.0%)
High3 (25.0%)
Unknown0 (0.0%)
User Interaction
None8 (66.7%)
Unknown0 (0.0%)
Required4 (33.3%)
Privileges Required
Low2 (16.7%)
High6 (50.0%)
None4 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-33891HIGH Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. This is related to a hardcoded ke | Apr 28, 2024 | 8.8 | 27 | NO | NO |
CVE-2024-12908HIGH Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler function, URI's were compared before normalizatio | Dec 26, 2024 | 8.3 | 25 | NO | NO |
CVE-2024-25652HIGH In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE (with acce | Mar 14, 2024 | 8.4 | 21 | NO | NO |
CVE-2023-4589HIGH Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software | Sep 6, 2023 | 7.2 | 21 | NO | NO |
CVE-2025-12810MEDIUM Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules).This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25.
A se | Jan 27, 2026 | 6.5 | 20 | NO | NO |
CVE-2024-25649MEDIUM In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) to read the following data from a memory dump: the decryp | Mar 14, 2024 | 6.7 | 19 | NO | NO |
CVE-2024-25650MEDIUM Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key (used to encrypt RabbitMQ messa | Mar 14, 2024 | 5.9 | 18 | NO | NO |
CVE-2024-25651MEDIUM User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a differe | Mar 14, 2024 | 5.3 | 17 | NO | NO |
CVE-2023-4588MEDIUM File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with | Sep 6, 2023 | 4.9 | 17 | NO | NO |
CVE-2025-6943MEDIUM Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. | Jul 2, 2025 | 4.0 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Secret Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 11.9.000025 | 1 | 6.5 | 0.4% | 0 | 0 |
| 11.9.000006 | 1 | 6.5 | 0.4% | 0 | 0 |
| 11.8.000001 | 1 | 6.5 | 0.4% | 0 | 0 |
| 11.4.000002 | 1 | 4.9 | 0.3% | 0 | 0 |
| 11.4.000000 | 5 | 6.1 | 0.4% | 0 | 0 |
| 10.9.000002 | 2 | 6.0 | 0.3% | 0 | 0 |