AlgoSec records
8 published records for vendor algosec.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
29Monitor | CVE-2025-12382No exploit | Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzeralgosec · firewall analyzer · CWE-22 | High7.3 | — | 0.5% | Nov 12, 2025 |
24Monitor | CVE-2023-46596No exploit | Improper input validation in FireFlow’s VisualFlow workflow editoralgosec · fireflow · CWE-79 | Medium6.1 | — | 0.3% | Feb 15, 2024 |
24Monitor | CVE-2025-12381No exploit | Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzeralgosec · firewall analyzer · CWE-269 | Medium6.1 | — | 0.2% | Dec 9, 2025 |
21Monitor | CVE-2022-36783No exploit | AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)algosec · fireflow · CWE-79 | Medium5.4 | — | 0.4% | Oct 25, 2022 |
21Monitor | CVE-2023-46595No exploit | Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editoralgosec · fireflow · CWE-79 | Medium5.4 | — | 0.3% | Nov 2, 2023 |
18Monitor | CVE-2013-5092Proof of concept | Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitraalgosec · firewall analyzer · CWE-79 | Medium4.3 | — | 3.2% | Jan 29, 2014 |
17Monitor | CVE-2014-4164No exploit | Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a ualgosec · fireflow · CWE-79 | Medium4.3 | — | 1.0% | Jun 16, 2014 |
17Monitor | CVE-2013-7318No exploit | Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary algosec · firewall analyzer · CWE-79 | Medium4.3 | — | 1.0% | Jan 29, 2014 |
- CVE-2025-1238229Monitor
Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer
HighCVSS 7.3No exploitEPSS 0%algosec · firewall analyzerNov 12, 2025
- CVE-2023-4659624Monitor
Improper input validation in FireFlow’s VisualFlow workflow editor
MediumCVSS 6.1No exploitEPSS 0%algosec · fireflowFeb 15, 2024
- CVE-2025-1238124Monitor
Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
MediumCVSS 6.1No exploitEPSS 0%algosec · firewall analyzerDec 9, 2025
- CVE-2022-3678321Monitor
AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)
MediumCVSS 5.4No exploitEPSS 0%algosec · fireflowOct 25, 2022
- CVE-2023-4659521Monitor
Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor
MediumCVSS 5.4No exploitEPSS 0%algosec · fireflowNov 2, 2023
- CVE-2013-509218Monitor
Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitra
MediumCVSS 4.3Proof of conceptEPSS 3%algosec · firewall analyzerJan 29, 2014
- CVE-2014-416417Monitor
Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a u
MediumCVSS 4.3No exploitEPSS 1%algosec · fireflowJun 16, 2014
- CVE-2013-731817Monitor
Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary
MediumCVSS 4.3No exploitEPSS 1%algosec · firewall analyzerJan 29, 2014