6.3Medium
CVE-2025-15344Tanium addressed a SQL injection vulnerability in Asset.
Description
Tanium addressed a SQL injection vulnerability in Asset.
Weakness (CWE):
CWE-89
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Tanium | Asset | 1.28.0 – < 1.28.254, 1.32.0 – < 1.32.161, 1.33.0 – < 1.33.250 | |
| tanium | service asset | 1.28.253 |
References and patches
- TAN-2025-035 Vendor Advisory
CPE matches (NVD) (3)
cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*< 1.28.254cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*≥ 1.32 < 1.32.161cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*≥ 1.33 < 1.33.250