Read the docs

Valmet

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Valmet records in CISA KEV

No Valmet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dna 2 records MEDIUM

Records

2 records in Dna · all components

TI-2025-14216 CVE-2025-15577 · GHSA-g666-g65w-p8mh

Valmet DNA Web server arbitrary file read access

Priority MEDIUM 44

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00569 Published 2026-02-12 No fix listed CWE-22
TI-2021-08404 CVE-2021-26726 · GHSA-f4vp-f6h9-8cx8

Remote code execution in Valmet DNA before Collection 2021

Priority MEDIUM 40

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01148 Published 2022-02-16 Fixed in Collection 2021 CWE-209
Open these records in search →