Thales
11 CVEs across 11 Thales products. Browse Thales vulnerabilities, severities, and proof-of-concept exploits.
Thales products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-3457 | | 2026-03-27 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stor… | |
CVE-2026-0872 | | 2026-02-13 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation.This issue… | |
CVE-2024-5264 | Medium | 5.9 | 2024-05-23 | Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis |
CVE-2024-0197 | High | 7.8 | 2024-02-27 | A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access. |
CVE-2023-7016 | High | 7.8 | 2024-02-27 | A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access. |
CVE-2023-5993 | High | 7.8 | 2024-02-27 | A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via l… |
CVE-2023-2737 | Medium | 5.7 | 2023-08-16 | Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local pri… |
CVE-2022-1293 | Medium | 5.7 | 2022-08-02 | The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. |
CVE-2021-42810 | High | 7.8 | 2022-01-19 | A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent… |
CVE-2021-42809 | Medium | 6.5 | 2021-12-20 | Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code. |
CVE-2021-42808 | Medium | 6.5 | 2021-12-20 | Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges. |