Read the docs

GE

Records129All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical51CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

GE records in CISA KEV

No GE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Intelligent Platforms Proficy Historian · all components

Priority HIGH 67

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39711 Published 2012-07-05 No fix listed CWE-78
Priority MEDIUM 62

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EM…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27595 Published 2012-07-05 No fix listed CWE-119
Priority MEDIUM 52

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or po…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06286 Published 2011-11-02 No fix listed CWE-119
Priority MEDIUM 50

The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04744 Published 2012-03-15 No fix listed CWE-119
Priority MEDIUM 50

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04597 Published 2011-11-02 No fix listed CWE-119
Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00908 Published 2011-11-02 No fix listed CWE-79
Open these records in search →