CVE-2025-15318

Summary

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Affected Software

VendorProductVersion RangeStatus
TaniumEnd-User Notifications Endpoint Tools1.18.0 < 1.18.10079affected
TaniumEnd-User Notifications Endpoint Tools10.0.0 < 10.0.14affected
TaniumEnd-User Notifications Endpoint Tools10.1.0 < 10.1.20affected

Weaknesses

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References