VendorsEthycafidesall versions
Vulnerabilities

Ethyca Fides

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2024-38537
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Published 2024-07-02 · Analyzed
9.8EPSS 0.014
CVE-2024-45053
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Published 2024-09-04 · Analyzed
9.1EPSS 0.013
CVE-2023-48224
Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides
Published 2023-11-15 · Modified
9.1EPSS 0.010
CVE-2023-41319
Remote Code Execution in Custom Integration Upload in Fides
Published 2023-09-06 · Modified
8.8EPSS 0.009
CVE-2024-52008
Password Policy Bypass Vulnerability in Fides Webserver
Published 2024-11-26 · Analyzed
8.8EPSS 0.006
CVE-2025-57817
Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
Published 2025-09-08 · Analyzed
8.6EPSS 0.004
CVE-2023-46124
Server-Side Request Forgery Vulnerability in Custom Integration Upload
Published 2023-10-24 · Modified
8.2EPSS 0.007
CVE-2023-36827
Fides vulnerable to Path Traversal in Webserver API
Published 2023-07-05 · Modified
7.5EPSS 0.015
CVE-2025-57816
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
Published 2025-09-08 · Analyzed
7.5EPSS 0.004
CVE-2023-46125
Fides Information Disclosure Vulnerability in Config API Endpoint
Published 2023-10-24 · Modified
6.5EPSS 0.007
CVE-2024-35189
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides
Published 2024-05-30 · Analyzed
6.5EPSS 0.006
CVE-2025-57815
Fides Lacks Brute-Force Protections on Authentication Endpoints
Published 2025-09-08 · Analyzed
6.5EPSS 0.003
CVE-2023-47114
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Published 2023-11-08 · Modified
6.1EPSS 0.006
CVE-2023-46126
Fides JavaScript Injection Vulnerability in Privacy Center URL
Published 2023-10-24 · Modified
5.4EPSS 0.006
CVE-2024-31223
Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Published 2024-07-03 · Analyzed
5.3EPSS 0.011
CVE-2024-45052
Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability
Published 2024-09-04 · Analyzed
5.3EPSS 0.006
CVE-2023-37481
Fides Webserver Vulnerable to SVG Bomb File Uploads
Published 2023-07-18 · Modified
4.9EPSS 0.007
CVE-2023-37480
Fides Webserver Vulnerable to Zip Bomb File Uploads
Published 2023-07-18 · Modified
4.9EPSS 0.007
CVE-2025-57766
Fides's Admin UI User Password Change Does Not Invalidate Current Session
Published 2025-09-08 · Analyzed
4.8EPSS 0.003
CVE-2024-34715
Partial Password Exposure Vulnerability in Fides Webserver Logs
Published 2024-05-29 · Analyzed
3.3EPSS 0.003