Tanium CVE-2025-15338

SQL injection in the Tanium Asset module lets an authenticated, high-privilege user read and modify data in the underlyi

Unauthorized OS command execution in Tanium Connect allows an attacker holding low-privilege authenticated access to run

OS command injection in Tanium Connect lets an authenticated, low-privileged user execute arbitrary commands on the unde

Tanium addressed an improper input validation vulnerability in Deploy. [CVSS 8.8 HIGH]

Command injection in Tanium Certificate Manager allows an authenticated attacker with low-level access to execute unauth

Command injection in Tanium Threat Response allows an authenticated low-privilege attacker to execute unauthorized code

SQL injection in Tanium Threat Response (CVSS 3.1 base score 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) allows a low-priv

Path traversal in Tanium Comply allows authenticated low-privileged network users to read files outside the module's int

Path traversal in Tanium Comply exposes all authenticated low-privilege users to a scope-changing arbitrary file write a

SQL injection in Tanium Comply (CWE-89) allows a network-accessible, unauthenticated attacker - contingent on user inter

Improper access controls (CWE-862, Missing Authorization) in Tanium Comply allow an authenticated low-privileged user to

Improper access controls in Tanium Comply allow an authenticated low-privilege user to perform unauthorized operations w