Known Vulnerabilities for Enterprise Vault by Veritas
Listed below are 7 of the newest known vulnerabilities associated with "Enterprise Vault" by "Veritas".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105820 json | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a ... | Not Provided | 2026-10-07 | 2026-10-08 |
| CVE-2026-105818 json | Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issu... | Not Provided | 2026-10-07 | 2026-10-08 |
| CVE-2026-105816 json | Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the confi... | Not Provided | 2026-10-07 | 2026-10-09 |
| CVE-2026-89322 json | Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names... | Not Provided | 2026-10-07 | 2026-10-09 |
| CVE-2026-19017 json | Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when con... | Not Provided | 2026-08-07 | 2026-08-10 |
| CVE-2026-14886 json | Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may all... | Not Provided | 2026-08-10 | 2026-08-12 |
| CVE-2026-12624 json | Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a traili... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-5006 json | A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may ... | Not Provided | 2026-08-24 | 2026-08-26 |
| CVE-2021-44682 json | An issue (6 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application st... | 9.8 - CRITICAL | 2021-12-06 | 2022-03-09 |
| CVE-2021-44681 json | An issue (5 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application st... | 9.8 - CRITICAL | 2021-12-06 | 2022-03-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Veritas | Enterprise Vault | 14.0 | |||
| Application | Veritas | Enterprise Vault | 12.5.2 | |||
| Application | Veritas | Enterprise Vault | 12.5.1 | |||
| Application | Veritas | Enterprise Vault | 12.5 | |||
| Application | Veritas | Enterprise Vault | 12.4.2 | |||
| Application | Veritas | Enterprise Vault | 12.4.1 | |||
| Application | Veritas | Enterprise Vault | 12.4 | |||
| Application | Veritas | Enterprise Vault | 12.3.2 | |||
| Application | Veritas | Enterprise Vault | 12.3.1 | |||
| Application | Veritas | Enterprise Vault | 12.3 | |||
| Application | Veritas | Enterprise Vault | 12.2.3 | |||
| Application | Veritas | Enterprise Vault | 12.2.2 | |||
| Application | Veritas | Enterprise Vault | 12.2.1 | |||
| Application | Veritas | Enterprise Vault | 12.2 | |||
| Application | Veritas | Enterprise Vault | 12.1.3 | |||
| Application | Veritas | Enterprise Vault | 12.1.2 | |||
| Application | Veritas | Enterprise Vault | 12.1.1 | |||
| Application | Veritas | Enterprise Vault | 12.1 | |||
| Application | Veritas | Enterprise Vault | 12.0.4 | |||
| Application | Veritas | Enterprise Vault | 12.0.3 |