GCVE - cpe:2.3:a:automox:automox:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:automox:automox:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Automox (`a59b6019-cd18-5c20-b0e6-d52d7ae6cca6`)
Product	Automox (`243d9f70-68bb-5867-bacd-2a8e9a4b7215`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36122`	vulnerable	2026-06-08 05:46:06.364519	Details available The Automox Agent before 40 on Windows incorrectly sets permissions on key files. Published: 2022-10-21T00:00:00.000Z Updated: 2025-05-08T15:12:15.092Z Open on db.gcve.eu Reference links https://automox.com https://www.automox.com/security/security-bulletin	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27904`	vulnerable	2026-06-08 05:42:43.703557	Details available Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process. Published: 2022-06-30T23:25:09.000Z Updated: 2024-08-03T05:41:10.705Z Open on db.gcve.eu Reference links https://automox.com https://www.automox.com/security/security-bulletin	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24308`	vulnerable	2026-06-08 05:41:00.130148	Details available Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process. Published: 2022-04-13T12:14:37.000Z Updated: 2024-08-03T04:07:02.344Z Open on db.gcve.eu Reference links https://automox.com https://www.automox.com/security/security-bulletin	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43326`	vulnerable	2026-06-08 05:36:43.251412	Details available Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory. Published: 2021-12-15T06:14:57.000Z Updated: 2024-08-04T03:55:28.520Z Open on db.gcve.eu Reference links https://support.automox.com/help/release-notes https://community.automox.com/product-updates-4/cve-2021-43326-and-cve-2021-43325-local-privilege-escalation-in-automox-agent-windows-only-1636 http://packetstormsecurity.com/files/165449/Automox-Agent-32-Local-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26909`	vulnerable	2026-06-08 05:30:45.556347	Automox Agent Guessable S3 Bucket Endpoint LOW (3.7) Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent. Published: 2021-04-23T15:35:20.717Z Updated: 2024-09-16T22:52:05.825Z Open on db.gcve.eu Reference links https://community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955 https://www.rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26908`	vulnerable	2026-06-08 05:30:45.555859	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.