Product by SaltStack

SaltStack Salt

58 known vulnerabilities in SaltStack Salt (SaltStack), 3 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in SaltStack Salt (SaltStack)

Critical	CVE-2020-16846	SaltStack Salt Shell Injection Vulnerability In CISA KEValso in 4 other products	9.8	06.11.2020
Critical	CVE-2020-11651	SaltStack Salt Authentication Bypass Vulnerability In CISA KEValso in 4 other products	9.8	30.04.2020
Critical	CVE-2020-11652	SaltStack Salt Path Traversal Vulnerability In CISA KEValso in 5 other products	6.5	30.04.2020
Critical	CVE-2021-25281	Salt: security vulnerability also in 2 other products	9.8	27.02.2021
Critical	CVE-2021-3197	Salt: security vulnerability also in 2 other products	9.8	27.02.2021
Critical	CVE-2020-25592	Salt: Authentication Bypass also in 2 other products	9.8	06.11.2020
Critical	CVE-2021-25282	Salt: Path Traversal also in 2 other products	9.1	27.02.2021
Critical	CVE-2019-17361	Salt: Command Injection also in 3 other products	9.8	17.01.2020
Critical	CVE-2021-25283	Salt: Template Injection also in 2 other products	9.8	27.02.2021
Critical	CVE-2021-3148	Salt: Command Injection also in 2 other products	9.8	27.02.2021
Critical	CVE-2018-15751	Salt: Authentication Bypass	9.8	24.10.2018
Critical	CVE-2017-12791	Salt: Path Traversal	9.8	23.08.2017
Critical	CVE-2021-3144	Salt: security vulnerability also in 2 other products	9.1	27.02.2021
Critical	CVE-2017-14695	Salt: Path Traversal	9.8	24.10.2017
Critical	CVE-2015-6941	SaltStack Salt 2015: security vulnerability also in 1 other product	9.8	09.08.2017
High	CVE-2021-31607	Salt: Command Injection also in 1 other product	7.8	23.04.2021
High	CVE-2017-5200	Salt: security vulnerability	8.8	26.09.2017
High	CVE-2020-28243	Salt: Command Injection also in 2 other products	7.8	27.02.2021
Critical	CVE-2021-25315	salt-api unauthenticated remote code execution also in 2 other products	9.8	03.03.2021
Critical	CVE-2016-9639	Salt: security vulnerability	9.1	07.02.2017
High	CVE-2017-14696	Salt: Denial of Service	7.5	24.10.2017
High	CVE-2021-21996	Saltstack Salt: security vulnerability also in 3 other products	7.5	08.09.2021
Critical	CVE-2019-1010259	Salt: SQL Injection	9.8	18.07.2019
High	CVE-2022-22967	SaltStack Salt: security vulnerability	8.8	22.06.2022
Critical	CVE-2021-33226	Salt: Buffer Overflow	9.8	17.02.2023

All vulnerabilities in search

All products by SaltStack

Key figures

Vulnerabilities