Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Checkmarx Clear all filters
TI-2026-79337 CVE-2026-77157

Checkmarx ast-cli auto-update skips checksum check before execution

Priority LOW 29

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and…

CVSS 4.0MEDIUM 6.3 Network High privileges User interaction EPSS 0.00143 Published 2026-10-22 Fixed in 2.3.60 CWE-353
TI-2026-79336 CVE-2026-77156

Path traversal in Checkmarx ast-cli tar extraction on Linux and macOS

Priority LOW 30

Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing the Vorpal ASCA real-time engine and the SCA Resolver) would allow a malicious tar archive…

CVSS 4.0MEDIUM 6.3 Network High privileges User interaction EPSS 0.00349 Published 2026-10-22 Fixed in 2.3.51 CWE-22
TI-2014-07204 CVE-2014-8778 · GHSA-pg9p-rcwh-5gv5

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to…

Priority MEDIUM 45

Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.Permissions.Permission…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03317 Published 2015-09-16 No fix listed CWE-94