Skip to content
OpenAdvisories

Vendor

BeyondTrust

25 known vulnerabilities.

Products

Remote Support 6 Privileged Remote Access 5 Privilege management for Windows 5 Remote Support(RS) & Privileged Remote Access(PRA) 3 U-Series Appliance 2 BeyondInsight PasswordSafe 2 BeyondInsight 2 Privileged Remote Access (PRA) 1 Remote Support (RS) 1 Privileged Identity 1 Remote support & Privileged Remote Access 1 Endpoint Privilege Management (Windows deployments) 1 Privilege Remote Access 1 Endpoint Privilege Management (Windows deployment) 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-1232 Public exploit

    Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

    A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, whi…

    BeyondTrust Privilege management for Windows Windows
  • Medium 6.6
    CVE-2024-12686 Exploited EPSS 33%

    Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

    A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

    BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)
    KEV Jan 13, 2025
  • Medium 6.4
    CVE-2024-9110

    Cross-Site Scripting In Privileged Identity

    A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks.

    BeyondTrust Privileged Identity
  • Medium 5.9
    CVE-2024-5813

    SSH Private Key Leak in BeyondInsight PasswordSafe

    A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

    BeyondTrust BeyondInsight PasswordSafe
  • Medium 4.3
    CVE-2024-4220

    Information Disclosure in BeyondInsight

    Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.

    BeyondTrust BeyondInsight
  • Medium 4.8
    CVE-2024-4219

    SSRF In BeyondInsight

    Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

    BeyondTrust BeyondInsight