Bentley

Records225All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high163CVSS 7.0–8.9

Exploited now

Bentley records in CISA KEV

TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2023-09-13 TI-2021-19919 Apache Log4j2 Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-10

Components

Products in the NVD configurations · select one to filter the records

Microstation 211 records LOW View 139 records LOW Microstation Connect 79 records LOW Bentley View 76 records LOW Contextcapture Viewer 2 records LOW Assetwise Alim For Transportation 1 record MEDIUM Eb System Management Console 1 record MEDIUM Seequent Leapfrog 1 record CRITICAL

Records

225 records

TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20

TI-2023-04477 CVE-2023-4863 · GHSA-j7hp-h8jx-5ppr

Out-of-bounds write in Google Chrome

CRITICAL 97KEV

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.99979 Published 2023-09-12 Partial fix · 116.0.5845.187, 1.3.2 +14 CWE-787

TI-2023-28351 CVE-2023-51708 · GHSA-xgc4-wqm7-7qrj

Bentley eB System Management Console applications within Assetwise Integrity Information…

MEDIUM 44

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00465 Published 2023-12-22 No fix listed CWE-287

TI-2021-21347 CVE-2021-46575 · GHSA-vffr-2h42-v6c6

Use after free in Bentley MicroStation CONNECT

LOW 39

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0237 Published 2022-02-18 No fix listed CWE-416

TI-2022-11292 CVE-2022-28647 · GHSA-jf9h-v46r-899c

Out-of-bounds read in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-125

TI-2022-11291 CVE-2022-28646 · GHSA-6j74-p6h3-8g44

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-787

TI-2022-11289 CVE-2022-28644 · GHSA-v452-7f7v-7m7q

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-787

TI-2022-11288 CVE-2022-28643 · GHSA-qw7p-6f7c-jj4p

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-787

TI-2022-11287 CVE-2022-28642 · GHSA-cvhp-xfvg-rr6v

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-787

TI-2022-11286 CVE-2022-28641 · GHSA-vr6q-6f35-6fpc

Use after free in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-416

TI-2022-11096 CVE-2022-28320 · GHSA-cp8x-fmj3-2w9f

This vulnerability allows remote attackers to execute arbitrary code on affected…

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-457

TI-2022-11095 CVE-2022-28319 · GHSA-rq4q-fjxh-vjg3

This vulnerability allows remote attackers to execute arbitrary code on affected…

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00938 Published 2023-03-29 No fix listed CWE-457

TI-2022-11092 CVE-2022-28316 · GHSA-vc68-vpf2-7xq5

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-787

TI-2022-11091 CVE-2022-28315 · GHSA-gm89-j9wr-p8rw

Stack-based buffer overflow in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00897 Published 2023-03-29 No fix listed CWE-121

TI-2022-11090 CVE-2022-28314 · GHSA-64p4-gjjq-76rf

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-787

TI-2022-11087 CVE-2022-28311 · GHSA-2797-h4gc-wv56

Out-of-bounds read in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-125

TI-2022-11086 CVE-2022-28310 · GHSA-hg7f-vxww-gm23

Use after free in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-416

TI-2022-11083 CVE-2022-28307 · GHSA-hgmf-x9rw-2cf9

Out-of-bounds read in Bentley View

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-125

TI-2022-11082 CVE-2022-28306 · GHSA-4fp9-g9rc-jhf3

Stack-based buffer overflow in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00897 Published 2023-03-29 No fix listed CWE-121

TI-2022-11081 CVE-2022-28305 · GHSA-m5q4-m78h-xjw6

Stack-based buffer overflow in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00897 Published 2023-03-29 No fix listed CWE-121

TI-2022-11080 CVE-2022-28304 · GHSA-3m65-86mg-45wp

Stack-based buffer overflow in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00897 Published 2023-03-29 No fix listed CWE-121

TI-2022-11079 CVE-2022-28303 · GHSA-65gj-57wq-hhwj

Use after free in Bentley View

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-416

TI-2022-11077 CVE-2022-28301 · GHSA-gm9h-jqqh-9434

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-787

TI-2022-11076 CVE-2022-28300 · GHSA-pmq2-7wm2-2j2f

Out-of-bounds write in Bentley MicroStation

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00951 Published 2023-03-29 No fix listed CWE-787

TI-2022-01116 CVE-2022-1229 · GHSA-qppx-wxgc-54v3

Out-of-bounds write in Bentley MicroStation CONNECT

LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00927 Published 2023-03-28 No fix listed CWE-787

Open these records in search →

Critical	1
High	163
Medium	34
Low	27
No CVSS	0