Tufin

9 CVEs across 3 Tufin products. Browse Tufin vulnerabilities, severities, and proof-of-concept exploits.

Tufin products with known CVEs

Product	CVEs
Securetrack	7
Securechange	2
Tufinos	1

Tufin CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2020-13462`	Medium	`5.7`	2021-02-09	Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
`CVE-2020-13461`	Medium	`4.3`	2021-02-09	Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor'…
`CVE-2020-13460`	High	`8.8`	2021-02-09	Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
`CVE-2020-13409`	Medium	`5.9`	2021-02-09	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later…
`CVE-2020-13408`	Medium	`5.9`	2021-02-09	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later…
`CVE-2020-13407`	Medium	`5.9`	2021-02-09	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later…
`CVE-2020-13134`	Medium	`4.8`	2021-01-20	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS pa…
`CVE-2020-13133`	Medium	`6.1`	2021-01-20	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS pa…
`CVE-2018-18406`	Critical	`9.9`	2019-06-19	An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a…