Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-569k-mj6a-mfdf
Vulnerability ID VCID-569k-mj6a-mfdf
Aliases CVE-2022-30689
GHSA-c5wc-v287-82pc
Summary Multiple vulnerabilities have been discovered in HashiCorp Vault, the worst of which could result in denial of service.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30689.json
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
epss 0.0036 https://api.first.org/data/v1/epss?cve=CVE-2022-30689
cvssv3.1 5.3 https://discuss.hashicorp.com
generic_textual MODERATE https://discuss.hashicorp.com
cvssv3.1 5.3 https://github.com/hashicorp/vault
generic_textual MODERATE https://github.com/hashicorp/vault
cvssv3.1 5.3 https://github.com/hashicorp/vault/commit/15baea5fa3e71c837c33b8bcbd8f06e0fbbc110d
generic_textual MODERATE https://github.com/hashicorp/vault/commit/15baea5fa3e71c837c33b8bcbd8f06e0fbbc110d
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2022-30689
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-30689
cvssv3.1 5.3 https://security.gentoo.org/glsa/202207-01
generic_textual MODERATE https://security.gentoo.org/glsa/202207-01
cvssv3.1 5.3 https://security.netapp.com/advisory/ntap-20220629-0006
generic_textual MODERATE https://security.netapp.com/advisory/ntap-20220629-0006
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30689.json
https://api.first.org/data/v1/epss?cve=CVE-2022-30689
https://discuss.hashicorp.com
https://github.com/hashicorp/vault
https://github.com/hashicorp/vault/commit/15baea5fa3e71c837c33b8bcbd8f06e0fbbc110d
https://nvd.nist.gov/vuln/detail/CVE-2022-30689
https://security.gentoo.org/glsa/202207-01
https://security.netapp.com/advisory/ntap-20220629-0006
2122462 https://bugzilla.redhat.com/show_bug.cgi?id=2122462
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30689.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://discuss.hashicorp.com
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/hashicorp/vault
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/hashicorp/vault/commit/15baea5fa3e71c837c33b8bcbd8f06e0fbbc110d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-30689
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://security.gentoo.org/glsa/202207-01
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://security.netapp.com/advisory/ntap-20220629-0006
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.58113
EPSS Score 0.0036
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:03:16.734611+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202207-01 38.0.0