Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

37 records

Priority MEDIUM 49

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0067 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
Priority MEDIUM 45

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00527 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
Priority MEDIUM 47

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0073 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
Priority MEDIUM 49

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0067 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
Priority MEDIUM 45

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00486 Published 2025-11-06 Fixed in 5.7.04 build 6425 CWE-306
TI-2025-33454 CVE-2025-53509 · GHSA-pw4m-7r53-w9mr

Advantech iView Argument Injection

Priority LOW 31

A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase().

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00346 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-88
TI-2025-33460 CVE-2025-53515 · GHSA-v7pq-8p73-84vh

Advantech iView SQL Injection

Priority MEDIUM 41

A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00614 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-32672 CVE-2025-52577 · GHSA-5fv5-hvwx-g2h9

Advantech iView SQL Injection

Priority MEDIUM 41

A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00614 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-33420 CVE-2025-53475 · GHSA-p75w-2vvm-8gvr

Advantech iView SQL Injection

Priority MEDIUM 50

A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07431 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-29375 CVE-2025-46704 · GHSA-v8qj-6www-vvm2

Advantech iView Path Traversal

Priority LOW 33

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05682 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-22
TI-2025-31041 CVE-2025-48891 · GHSA-4rw3-6f54-wc25

Advantech iView SQL Injection

Priority LOW 31

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00316 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-27603 CVE-2025-41442 · GHSA-9h6g-gh32-jqrj

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79
TI-2025-33463 CVE-2025-53519 · GHSA-723m-6rjg-vjjf

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79
TI-2025-33348 CVE-2025-53397 · GHSA-5g82-9fvm-8qhf

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00232 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79
TI-2023-28719 CVE-2023-52335 · GHSA-crw8-988f-3cm9

SQL injection in Advantech iView

Priority MEDIUM 41

Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01289 Published 2024-11-22 No fix listed CWE-89
TI-2023-03698 CVE-2023-3983 · GHSA-hcvh-c3gp-88hv

SQL injection in Advantech iView

Priority MEDIUM 57

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.16705 Published 2023-07-31 No fix listed CWE-89
TI-2022-03071 CVE-2022-3323 · GHSA-4cm4-j9qp-hc8j

SQL injection in Advantech iView

Priority HIGH 72

An SQL injection vulnerability in Advantech iView 5.7.04.6469.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.29312 Published 2022-09-27 No fix listed CWE-89
TI-2022-01983 CVE-2022-2142 · GHSA-gr2v-jw76-jf4q

SQL injection in Advantech iView

Priority LOW 39

The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00917 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-89
TI-2022-01984 CVE-2022-2143 · GHSA-4w4w-jrgw-jr5h

Command injection in Advantech iView

Priority HIGH 84

The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.62621 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-77
TI-2022-01977 CVE-2022-2136 · GHSA-3cvh-w666-7794

SQL injection in Advantech iView

Priority MEDIUM 52

The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0938 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-89
TI-2022-01976 CVE-2022-2135 · GHSA-p352-52vf-m6c4

SQL injection in Advantech iView

Priority MEDIUM 52

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10506 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-89
TI-2022-01979 CVE-2022-2138 · GHSA-jp6v-rq8g-2cjf

Missing authentication in Advantech iView

Priority MEDIUM 55

The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.11595 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-306
TI-2022-01980 CVE-2022-2139 · GHSA-72gc-6xcf-q52m

Path traversal in Advantech iView

Priority MEDIUM 58

The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16029 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-23
TI-2022-01978 CVE-2022-2137 · GHSA-3hh5-x5h6-6vjx

SQL injection in Advantech iView

Priority LOW 24

The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00963 Published 2022-07-22 Fixed in 5_7_04_6469 CWE-89
TI-2021-12539 CVE-2021-32930 · GHSA-jf63-8279-v8vq

Missing authentication in iView

Priority MEDIUM 53

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08055 Published 2021-06-11 Fixed in v5.7.03.6182 CWE-306
Load more