Tanium addressed an improper output sanitization vulnerability in TanOS.

Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.

Problem type

Improper Encoding or Escaping of Output

Affected products

Tanium

Tanium Appliance

< 1.8.3.0146 - AFFECTED

< 1.8.4.0157 - AFFECTED

References

TAN-2025-003

https://security.tanium.com/TAN-2025-003

JSON source

https://cveawg.mitre.org/api/cve/CVE-2025-15312

Click to expand

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2025-15312",
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "dateUpdated": "2026-02-05T18:26:06.378Z",
    "dateReserved": "2025-12-29T23:12:53.559Z",
    "datePublished": "2026-02-05T18:26:06.378Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium",
        "dateUpdated": "2026-02-05T18:26:06.378Z"
      },
      "datePublic": "2025-01-22T00:00:00.000Z",
      "title": "Tanium addressed an improper output sanitization vulnerability in TanOS.",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper output sanitization vulnerability in Tanium Appliance."
        }
      ],
      "affected": [
        {
          "vendor": "Tanium",
          "product": "Tanium Appliance",
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "1.8.3.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "1.8.3.0146"
            },
            {
              "version": "1.8.4.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "1.8.4.0157"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "Improper Encoding or Escaping of Output",
              "cweId": "CWE-116",
              "type": "CWE"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://security.tanium.com/TAN-2025-003",
          "name": "TAN-2025-003"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM"
          }
        }
      ]
    }
  }
}