Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Tridium Component: Niagara Ax Framework Clear all filters
TI-2018-13449 CVE-2018-18985 · GHSA-76hj-25wr-pvgg

Cross-site scripting in Tridium Niagara Enterprise Security 2.3u1, all versions prior to…

Priority LOW 26

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00973 Published 2019-01-29 No fix listed CWE-79
TI-2017-12310 CVE-2017-16748 · GHSA-jwjj-j6r3-3643

Improper authentication in ICS-CERT Niagara AX Framework and Niagara 4 Framework

Priority MEDIUM 50

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker ad…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05219 Published 2018-08-20 No fix listed CWE-287
TI-2017-12307 CVE-2017-16744 · GHSA-3365-prfc-qrcq

Path traversal in ICS-CERT Niagara AX Framework and Niagara 4 Framework

Priority MEDIUM 41

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.06142 Published 2018-08-20 No fix listed CWE-22