Watchfire

watchfire

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-2015 1Watchfire 1Appscan Apr 23, 2026 Apr 30, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSa...Show more Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) saveRecordedExploreToFile method in a different control. NOTE: this can be leveraged for code execution by writing to a Startup folder.Show less
CVE-2005-4270 1Watchfire 1Appscan Qa Apr 16, 2026 Dec 15, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-2015

1Watchfire

1Appscan

Apr 23, 2026

Apr 30, 2008

N/A· v4

N/A· v3

9.3 HIGH· v2

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) saveRecordedExploreToFile method in a different control. NOTE: this can be leveraged for code execution by writing to a Startup folder.Show less

CVE-2005-4270

1Watchfire

1Appscan Qa

Apr 16, 2026

Dec 15, 2005

N/A· v4

N/A· v3

7.5 HIGH· v2

Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.