AlgoSec kayıtları
algosec üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2025-12382İstismar yok | Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzeralgosec · firewall analyzer · CWE-22 | Yüksek7,3 | — | %0,5 | 12 Kas 2025 |
24İzleyin | CVE-2023-46596İstismar yok | Improper input validation in FireFlow’s VisualFlow workflow editoralgosec · fireflow · CWE-79 | Orta6,1 | — | %0,3 | 15 Şub 2024 |
24İzleyin | CVE-2025-12381İstismar yok | Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzeralgosec · firewall analyzer · CWE-269 | Orta6,1 | — | %0,2 | 9 Ara 2025 |
21İzleyin | CVE-2022-36783İstismar yok | AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)algosec · fireflow · CWE-79 | Orta5,4 | — | %0,4 | 25 Eki 2022 |
21İzleyin | CVE-2023-46595İstismar yok | Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editoralgosec · fireflow · CWE-79 | Orta5,4 | — | %0,3 | 2 Kas 2023 |
18İzleyin | CVE-2013-5092Kavram kanıtı | Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitraalgosec · firewall analyzer · CWE-79 | Orta4,3 | — | %3,2 | 29 Oca 2014 |
17İzleyin | CVE-2014-4164İstismar yok | Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a ualgosec · fireflow · CWE-79 | Orta4,3 | — | %1,0 | 16 Haz 2014 |
17İzleyin | CVE-2013-7318İstismar yok | Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary algosec · firewall analyzer · CWE-79 | Orta4,3 | — | %1,0 | 29 Oca 2014 |
- CVE-2025-1238229İzleyin
Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer
YüksekCVSS 7,3İstismar yokEPSS %0algosec · firewall analyzer12 Kas 2025
- CVE-2023-4659624İzleyin
Improper input validation in FireFlow’s VisualFlow workflow editor
OrtaCVSS 6,1İstismar yokEPSS %0algosec · fireflow15 Şub 2024
- CVE-2025-1238124İzleyin
Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
OrtaCVSS 6,1İstismar yokEPSS %0algosec · firewall analyzer9 Ara 2025
- CVE-2022-3678321İzleyin
AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)
OrtaCVSS 5,4İstismar yokEPSS %0algosec · fireflow25 Eki 2022
- CVE-2023-4659521İzleyin
Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor
OrtaCVSS 5,4İstismar yokEPSS %0algosec · fireflow2 Kas 2023
- CVE-2013-509218İzleyin
Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitra
OrtaCVSS 4,3Kavram kanıtıEPSS %3algosec · firewall analyzer29 Oca 2014
- CVE-2014-416417İzleyin
Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a u
OrtaCVSS 4,3İstismar yokEPSS %1algosec · fireflow16 Haz 2014
- CVE-2013-731817İzleyin
Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary
OrtaCVSS 4,3İstismar yokEPSS %1algosec · firewall analyzer29 Oca 2014