TI-2018-13017 CVE-2018-18406 · GHSA-347g-9rp4-26rw
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final).
Priority MEDIUM 46
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final).
Tufin
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Tufin records in CISA KEVNo Tufin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2020-10554 CVE-2020-13460 · GHSA-4jwv-8x37-cg8x
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin…
Priority LOW 39
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
TI-2020-10323 CVE-2020-13133 · GHSA-3665-mhfj-379q
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
Priority LOW 28
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
TI-2020-10514 CVE-2020-13409 · GHSA-jmqg-77rm-wvw3
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is…
Priority LOW 27
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by differe…
TI-2020-10513 CVE-2020-13408 · GHSA-fg9m-gw92-f74h
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is…
Priority LOW 27
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by differe…
TI-2020-10512 CVE-2020-13407 · GHSA-hpqm-3mvx-vj45
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is…
Priority LOW 27
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by differe…
TI-2020-10556 CVE-2020-13462 · GHSA-jm2j-8hvq-7r72
Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all…
Priority LOW 26
Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA.
TI-2020-10324 CVE-2020-13134 · GHSA-qr8g-6983-rmpw
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
Priority LOW 23
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
TI-2020-10555 CVE-2020-13461 · GHSA-6vgx-p4v6-c459
Username enumeration in present in Tufin SecureTrack.
Priority LOW 21
Username enumeration in present in Tufin SecureTrack.