Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: GE Component: Intelligent Platforms Proficy Historian Clear all filters
TI-2012-02191 CVE-2012-2516 · GHSA-x4j8-mmc7-549m

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help…

Priority HIGH 67

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39353 Published 2012-07-05 No fix listed CWE-78
TI-2012-02190 CVE-2012-2515 · GHSA-c4f6-gg76-2x9x

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in…

Priority MEDIUM 62

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EM…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27316 Published 2012-07-05 No fix listed CWE-119
TI-2012-00222 CVE-2012-0229 · GHSA-c3qw-qpq4-7674

The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier…

Priority MEDIUM 50

The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04744 Published 2012-03-15 No fix listed CWE-119
TI-2011-02936 CVE-2011-3320 · GHSA-jrgm-85c3-qpxg

Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00908 Published 2011-11-02 No fix listed CWE-79
TI-2011-01691 CVE-2011-1919 · GHSA-896g-v7p4-g9hv

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications…

Priority MEDIUM 50

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04597 Published 2011-11-02 No fix listed CWE-119
TI-2011-01690 CVE-2011-1918 · GHSA-35jj-9635-2vjm

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms…

Priority MEDIUM 52

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or po…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06286 Published 2011-11-02 No fix listed CWE-119