Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Watchfire Clear all filters
TI-2026-05125 CVE-2026-5846 · GHSA-5qvx-vvgc-3mv8

Hard-coded Cryptographic Key in Watchfire Controllers

Priority LOW 35

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in w…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00213 Published 2026-07-30 Fixed in 12.31 SP1, 11.34 +3 CWE-321
TI-2008-01937 CVE-2008-2015 · GHSA-89pq-qvjv-f582

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire…

Priority MEDIUM 51

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSa…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08326 Published 2008-04-30 No fix listed CWE-22