What’s Vulnerable › Products

ethyca fides vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ethyca fides version is affected

Latest ethyca fides vulnerabilities

• CVE-2026-44541 — Fides: DOM-based XSS vulnerability in fides.js via fides_description override (CVSS 7.0)
• CVE-2026-42303 — Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection (CVSS 6.1)
• CVE-2025-57817 — Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation (CVSS 7.2)
• CVE-2025-57816 — Fides Webserver API Rate Limiting Vulnerability in Proxied Environments (CVSS 7.5)
• CVE-2025-57815 — Fides Lacks Brute-Force Protections on Authentication Endpoints (CVSS 6.5)
• CVE-2025-57766 — Fides's Admin UI User Password Change Does Not Invalidate Current Session (CVSS 4.8)
• CVE-2024-52008 — Password Policy Bypass Vulnerability in Fides Webserver (CVSS 8.8)
• CVE-2024-45053 — Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine (CVSS 7.2)
• CVE-2024-45052 — Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability (CVSS 5.3)
• CVE-2024-31223 — Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL (CVSS 5.3)
• CVE-2024-38537 — Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js (CVSS 9.8)
• CVE-2024-35189 — Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides (CVSS 6.5)
• CVE-2024-34715 — Partial Password Exposure Vulnerability in Fides Webserver Logs (CVSS 3.3)
• CVE-2023-48224 — Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides (CVSS 9.1)
• CVE-2023-47114 — Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages (CVSS 6.1)
• CVE-2023-46126 — Fides JavaScript Injection Vulnerability in Privacy Center URL (CVSS 5.4)
• CVE-2023-46125 — Fides Information Disclosure Vulnerability in Config API Endpoint (CVSS 6.5)
• CVE-2023-46124 — Server-Side Request Forgery Vulnerability in Custom Integration Upload (CVSS 7.2)
• CVE-2023-41319 — Remote Code Execution in Custom Integration Upload in Fides (CVSS 7.2)
• CVE-2023-37481 — Fides Webserver Vulnerable to SVG Bomb File Uploads (CVSS 4.9)
• CVE-2023-37480 — Fides Webserver Vulnerable to Zip Bomb File Uploads (CVSS 4.9)
• CVE-2023-36827 — Fides vulnerable to Path Traversal in Webserver API (CVSS 7.5)