AlgoSec

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AlgoSec records in CISA KEV

No AlgoSec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fireflow 4 records LOW Firewall Analyzer 4 records LOW

Records

4 records in Firewall Analyzer · all components

TI-2025-11359 CVE-2025-12382 · GHSA-5rfv-3h3m-2j9c

Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

LOW 35

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection.

CVSS 4.0HIGH 7.3 Adjacent network Low privileges User interaction EPSS 0.00515 Published 2025-11-12 No fix listed CWE-22

TI-2025-11358 CVE-2025-12381 · GHSA-mmf6-49fc-cg8h

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

LOW 28

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.

CVSS 4.0MEDIUM 6.1 Local Low privileges User interaction EPSS 0.0016 Published 2025-12-09 No fix listed CWE-269

TI-2013-04425 CVE-2013-5092 · GHSA-67pc-gr23-6r49

Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall…

LOW 26

Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03247 Published 2014-01-29 No fix listed CWE-79

TI-2013-05983 CVE-2013-7318 · GHSA-h9rg-c998-4hw4

Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall…

LOW 22

Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00984 Published 2014-01-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	8
Low	0
No CVSS	0