Algosec

9 CVEs across 8 Algosec products. Browse Algosec vulnerabilities, severities, and proof-of-concept exploits.

Algosec products with known CVEs

ProductCVEs
Fireflow4
Firewall Analyzer4
Algosec Fireflow2
Firewall Analyzer2
Fireflow A32.01
Fireflow A32.101
Fireflow A32.201
Horizon Security Analyzer1
Algosec CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-776542026-09-08Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and…
CVE-2025-12381High7.82025-12-09Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with…
CVE-2025-12382High8.82025-11-12Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to…
CVE-2023-46596Medium5.12024-02-15 Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60…
CVE-2023-46595Medium5.92023-11-02Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can le…
CVE-2022-36783Medium6.52022-10-25AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result…
CVE-2014-41642014-06-16Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to Se…
CVE-2013-73182014-01-29Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML…
CVE-2013-50922014-01-29Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HT…