Watchfire

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 3
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-5846

    Hard-coded Cryptographic Key in Watchfire Controllers

    Last Modified: Aug 02, 2026
    Published: Jul 30, 2026

    CVE-2008-2015

    Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) saveRecordedExploreToFile method in a different control. NOTE: this can be leveraged for code execution by writing to a Startup folder.

    Last Modified: Apr 23, 2026
    Published: Apr 30, 2008

    CVE-2005-4270

    Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.

    Last Modified: Apr 16, 2026
    Published: Dec 15, 2005
    Items Per Page