zitadel Latest Vulnerabilities
Latest vulnerabilities published by zitadel
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Information Disclosure Vulnerability in ZITADEL Identity Infrastructure Tool
CVE-2025-67717ZitadelZitadel5.3MEDIUMDOM-Based XSS Vulnerability in ZITADEL Identity Infrastructure Tool
CVE-2025-67495ZitadelZitadel8HIGHUnauthenticated SSRF Vulnerability in ZITADEL Identity Infrastructure Tool
CVE-2025-67494ZitadelZitadel9.3CRITICALIdentity Management Platform Vulnerability in ZITADEL
CVE-2025-64717ZitadelZitadel7.4HIGHIDOR Vulnerability in Zitadel Identity Management Platform
CVE-2025-64431ZitadelZitadel8.7HIGHMulti-Factor Authentication Bypass in Zitadel Policy Enforcement
CVE-2025-64103ZitadelZitadel8.7HIGHOnline Brute Force Vulnerability in Zitadel Identity Infrastructure Software
CVE-2025-64102ZitadelZitadel7.7HIGHVulnerability in Zitadel's Password Reset Mechanism
CVE-2025-64101ZitadelZitadel8.1HIGHUsername Enumeration Vulnerability in Zitadel Identity Infrastructure Software
CVE-2025-57770ZitadelZitadel5.3MEDIUMSession Management Vulnerability in ZITADEL Identity Management System
CVE-2025-53895ZitadelZitadel7.7HIGHPassword Reset Mechanism Vulnerability in Zitadel Identity Infrastructure
CVE-2025-48936ZitadelZitadel8.8HIGHSession API Vulnerability in ZITADEL Identity Infrastructure Software
CVE-2025-46815ZitadelZitadel8HIGHUser Enumeration Vulnerability in Zitadel Identity Infrastructure Software
CVE-2025-31124ZitadelZitadel5.3MEDIUMIdentity Infrastructure Vulnerability in Zitadel Affecting Token Authorization
CVE-2025-31123ZitadelZitadel8.7HIGHInsecure Direct Object Reference Vulnerability in Zitadel Identity Infrastructure Software
CVE-2025-27507ZitadelZitadel9CRITICALZitadel Disables User Self-Registration Due to Security Vulnerability
CVE-2024-49757ZitadelZitadel7.5HIGHZitadel Vulnerability Allows Bypass of Security Measures
CVE-2024-49753ZitadelZitadel5.9MEDIUMZitadel Fixes Deactivation Mechanism Vulnerability
CVE-2024-46999ZitadelZitadel6.5MEDIUMService Account Deactivation Issue in Zitadel Identify Management Platform
CVE-2024-47000ZitadelZitadel7.5HIGHUnauthorized Access to Deactivated Projects in Zitadel Due to Tightly Coupled Applications
CVE-2024-47060ZitadelZitadel6.5MEDIUMZitadel Identity Management System Vulnerability
CVE-2024-41953ZitadelZitadel6.1MEDIUMIdentity Management System Vulnerability in Zitadel
CVE-2024-41952ZitadelZitadel5.3MEDIUMZITADEL Fixes Issue Exposing Other Users' Sessions
CVE-2024-39683ZitadelZitadel6.5MEDIUMZitadel Addresses Connection Issues in Latest Point Release
CVE-2024-32967ZitadelZitadel5.3MEDIUMZITADEL Patches (T)OTP Check Lockout Mechanism in Version 2.50.0
CVE-2024-32868ZitadelZitadel8.1HIGH