Dawid Dudek

**Name of the Vulnerable Software and Affected Versions** Delinea Cloud Suite and Privileged Access Service versions prior to 2023.1 (agent 6.0.1) Delinea Server Suite versions 2022.1.10 (agent version 5.9.1-337) and 2023.0.5 (agent version 6.0.0-158) **Description** The software suffers from an Improper Inconsistent Interpretation of HTTP Requests, also known as HTTP Request Smuggling. This issue affects Delinea Cloud Suite and Privileged Access Service. **Recommendations** Upgrade to Delinea Server Suite 2023.1 (agent 6.0.1) or later. Upgrade to Delinea Server Suite release 2023.0.5 (agent version 6.0.0-158). Upgrade to Delinea Server Suite release 2022.1.10 (agent version 5.9.1-337).

**Name of the Vulnerable Software and Affected Versions** Delinea Cloud Suite versions prior to 25.1 Delinea Privileged Access Service versions prior to 25.1 **Description** The software contains a flaw due to improper neutralization of special elements used in an SQL command, which could lead to SQL injection. The issue affects Delinea Cloud Suite and Privileged Access Service. **Recommendations** Update Delinea Cloud Suite to version 25.1 or later. Update Delinea Privileged Access Service to version 25.1 or later.