Vulnerabilities in Algosec

6 results

Vexday analysis

Algosec apresenta pegada de vulnerabilidade reduzida com apenas 2 CVEs catalogados, nenhum sob exploração ativa conhecida e sem críticas de CVSS. A fraqueza dominante é CWE-79 (injeção XSS), típica de aplicações web, com nenhuma divulgação recente (últimos 90 dias), indicando risco controlado no curto prazo.

CVE-2025-12382HIGHPath Traversal Allows Remote Code Execution in AlgoSec Firewall AnalyzerEPSS 0.5%CVE-2022-36783MEDIUMAlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)EPSS 0.4%CVE-2023-46595MEDIUMNet-NTLM leak via HTML injection in FireFlow VisualFlow workflow editorEPSS 0.3%CVE-2023-46596MEDIUMImproper input validation in FireFlow’s VisualFlow workflow editorEPSS 0.3%CVE-2025-12381MEDIUMPrivilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall AnalyzerEPSS 0.2%CVE-2026-77654MEDIUMLocal Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security AnalyzerEPSS 0.1%