Browse CVEs

MEDIUM 5.7 CVE-2020-13462 Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA. Securetrack Mitigation only Fix from $1,6002021-02-09 HIGH 8.8 CVE-2020-13460 Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA. Securetrack Mitigation only Fix from $1,9502021-02-09 MEDIUM 5.9 CVE-2020-13408 Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and ca… Securetrack Mitigation only Fix from $1,6002021-02-09 MEDIUM 5.9 CVE-2020-13409 Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and ca… Securetrack Mitigation only Fix from $1,6002021-02-09 MEDIUM 5.9 CVE-2020-13407 Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and ca… Securetrack Mitigation only Fix from $1,6002021-02-09 MEDIUM 6.1 CVE-2020-13133 Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing … Securechange Mitigation only Fix from $1,6002021-01-20 CRITICAL 9.9 CVE-2018-18406 An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerabili… Securetrack No fix yet Fix from $2,3002019-06-19