Tanium CVE-2025-15320

Unauthorized OS command execution in Tanium Connect allows an attacker holding low-privilege authenticated access to run

OS command injection in Tanium Connect lets an authenticated, low-privileged user execute arbitrary commands on the unde

Tanium addressed an improper input validation vulnerability in Deploy. [CVSS 8.8 HIGH]

Path traversal in Tanium Comply allows authenticated low-privileged network users to read files outside the module's int

Path traversal in Tanium Comply exposes all authenticated low-privilege users to a scope-changing arbitrary file write a

SQL injection in Tanium Comply (CWE-89) allows a network-accessible, unauthenticated attacker - contingent on user inter

Improper access controls (CWE-862, Missing Authorization) in Tanium Comply allow an authenticated low-privileged user to

Improper access controls in Tanium Comply allow an authenticated low-privilege user to perform unauthorized operations w

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance. [CVSS 7.8 HIGH]

Endpoint Configuration Toolset Solution is affected by improper link resolution before file access (CVSS 7.8).

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. [CVSS 7.8 HIGH]

Server-side request forgery in Tanium Enforce allows authenticated low-privileged users to cause the Enforce server to i