Tanos
CVE-2025-15312
MEDIUM
Severity by source
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
AnalysisAI
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance. [CVSS 6.6 MEDIUM]
Technical ContextAI
Classified as CWE-116 (Improper Encoding or Escaping of Output). Affects Tanos. Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
RemediationAI
Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance. [CVSS 7.8 HIGH]
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS. [CVSS 5.3 MEDIUM]
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance. [CVSS 3.7 LOW]
Tanium addressed an improper input validation vulnerability in Tanium Appliance. [CVSS 2.7 LOW]
Tanium addressed an arbitrary file deletion vulnerability in TanOS. Rated medium severity (CVSS 5.6), this vulnerability
Same weakness CWE-116 – Improper Encoding or Escaping of Output
View allShare
External POC / Exploit Code
Leaving vuln.today