7.2

CVE-2025-15312

Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tanium ≫ Tanos Version >= 1.8.3 < 1.8.3.0146
Tanium ≫ Tanos Version >= 1.8.4 < 1.8.4.0157
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.169
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3938794e-25f5-4123-a1ba-5cbd7f104512 6.6 0.7 5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.