Read the docs

Watchfire

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Watchfire records in CISA KEV

No Watchfire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority MEDIUM 51

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSa…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08326 Published 2008-04-30 No fix listed CWE-22
Priority LOW 35

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in w…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00213 Published 2026-07-30 Fixed in 12.31 SP1, 11.34 +3 CWE-321
Open these records in search →