Algosec
8 CVEs across 7 Algosec products. Browse Algosec vulnerabilities, severities, and proof-of-concept exploits.
Algosec products with known CVEs
Algosec CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-12381 | High | 7.8 | 2025-12-09 | Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection.
A local user with… |
CVE-2025-12382 | High | 8.8 | 2025-11-12 | Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to… |
CVE-2023-46596 | Medium | 5.1 | 2024-02-15 |
Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60… |
CVE-2023-46595 | Medium | 5.9 | 2023-11-02 | Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can le… |
CVE-2022-36783 | Medium | 6.5 | 2022-10-25 | AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result… |
CVE-2014-4164 | | | 2014-06-16 | Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to Se… |
CVE-2013-7318 | | | 2014-01-29 | Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML… |
CVE-2013-5092 | | | 2014-01-29 | Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HT… |