Read the docs

Checkmarx

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Checkmarx records in CISA KEV

No Checkmarx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cxsast 1 record MEDIUM

Records

3 records

TI-2014-07204 CVE-2014-8778 · GHSA-pg9p-rcwh-5gv5

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to…

Priority MEDIUM 45

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.Permissions.Permission…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03317 Published 2015-09-16 No fix listed CWE-94
TI-2026-79336 CVE-2026-77156

Path traversal in Checkmarx ast-cli tar extraction on Linux and macOS

Priority LOW 30

Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing the Vorpal ASCA real-time engine and the SCA Resolver) would allow a malicious tar archive…

CVSS 4.0MEDIUM 6.3 Network High privileges User interaction EPSS 0.00349 Published 2026-10-22 Fixed in 2.3.51 CWE-22
TI-2026-79337 CVE-2026-77157

Checkmarx ast-cli auto-update skips checksum check before execution

Priority LOW 29

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and…

CVSS 4.0MEDIUM 6.3 Network High privileges User interaction EPSS 0.00143 Published 2026-10-22 Fixed in 2.3.60 CWE-353
Open these records in search →