Read the docs

Tridium

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Tridium records in CISA KEV

No Tridium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Niagara 14 records MEDIUM Niagara Enterprise Security 12 records MEDIUM Niagara Ax 6 records MEDIUM Niagara Ax Framework 3 records MEDIUM Niagara4 1 record LOW

Records

12 records in Niagara Enterprise Security · all components

TI-2025-03484 CVE-2025-3940 · GHSA-5c2w-vf3p-r6vw

Improper Use of Validation Framework

Priority MEDIUM 48

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00373 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-1173
TI-2025-03487 CVE-2025-3943 · GHSA-j46h-hw72-jxqh

Use of GET Request Method With sensitive Query Strings

Priority MEDIUM 46

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11383 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-598
TI-2025-03488 CVE-2025-3944 · GHSA-8xr7-6x2j-wgq9

Incorrect permission assignment in Tridium Niagara Framework

Priority MEDIUM 43

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-732
TI-2025-03485 CVE-2025-3941 · GHSA-q524-5rg8-2j6p

Improper Handling of Windows: DATA Alternate Data Stream

Priority MEDIUM 43

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-69
TI-2025-03482 CVE-2025-3938 · GHSA-hcrg-qr57-hr37

Broken or risky cryptographic algorithm in Tridium Niagara Framework

Priority MEDIUM 42

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00331 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-325
TI-2025-03481 CVE-2025-3937 · GHSA-jr34-3463-3cxq

Use of Password Hash with Insufficient Computational Effort

Priority MEDIUM 42

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00337 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-916
TI-2025-03480 CVE-2025-3936 · GHSA-prr2-m2fh-3hv6

Incorrect permission assignment in Tridium Niagara Framework

Priority MEDIUM 42

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00366 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-732
TI-2025-03486 CVE-2025-3942 · GHSA-62cm-c2h4-rg2m

Improper output encoding in Tridium Niagara Framework

Priority LOW 33

Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00308 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-117
TI-2025-03483 CVE-2025-3939 · GHSA-6hrx-7mgg-5cvp

Observable response discrepancy in Tridium Niagara Framework

Priority LOW 30

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-204
TI-2018-13449 CVE-2018-18985 · GHSA-76hj-25wr-pvgg

Cross-site scripting in Tridium Niagara Enterprise Security 2.3u1, all versions prior to…

Priority LOW 26

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00973 Published 2019-01-29 No fix listed CWE-79
Open these records in search →