watchfire vulnerabilities

Products

• appscan 1
• appscan qa 1
• BC550 1
• BC750 1
• BC760 1
• BC760DC 1

Latest watchfire CVEs

Newest publication first

1. CVE-2026-5846 Hard-coded Cryptographic Key in Watchfire Controllers

   Published 2026-07-30

   High·CVSS 7.6 EPSS 0.21%

   The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintex...

2. CVE-2008-2015 Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument....

   Published 2008-04-30

   High·CVSS 9.3 EPSS 8.3% Public exploit

   Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) CompactSave and (2) SaveSession method in one control, and the (3) sa...

3. CVE-2005-4270 Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.

   Published 2005-12-15

   High·CVSS 7.5 EPSS 5.5% Public exploit

   Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.