Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Valmet Component: Dna Clear all filters
TI-2025-14216 CVE-2025-15577 · GHSA-g666-g65w-p8mh

Valmet DNA Web server arbitrary file read access

Priority MEDIUM 44

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0056 Published 2026-02-12 No fix listed CWE-22
TI-2021-08404 CVE-2021-26726 · GHSA-f4vp-f6h9-8cx8

Remote code execution in Valmet DNA before Collection 2021

Priority MEDIUM 40

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01148 Published 2022-02-16 Fixed in Collection 2021 CWE-209