Vulnerabilities (CVE)

Filtered by vendor Beyondtrust Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49944 1 Beyondtrust 1 Privilege Management For Windows 2024-01-03 N/A 6.7 MEDIUM
The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.
CVE-2021-31589 1 Beyondtrust 1 Appliance Base Software 2022-02-07 4.3 MEDIUM 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.