Securden vulnerabilities
We track 3 vulnerabilities in Securden products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2025.
Latest Securden vulnerabilities
- 7.2 High severity
Unified PAM: Use of Weak Credentials
Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions.
- 9.4 Critical severity
Unified PAM: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.
- 9.8 Critical severity
Unified PAM: Missing Authentication for Critical Functionality
An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.