Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

23 records

Vendor: Scada-LTS Component: Scada-lts Clear all filters
TI-2026-15963 CVE-2026-19657 · GHSA-cq6c-v5w8-x82x

ScadaLTS Unauthenticated Reflected XSS

Priority LOW 27

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00278 Published 2026-08-12 No fix listed CWE-79
TI-2026-15962 CVE-2026-19656 · GHSA-9cw4-v739-q6qp

ScadaLTS Authenticated Remote Code Execution

Priority MEDIUM 43

ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to execute arbitrary operating system comma…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0052 Published 2026-08-12 No fix listed CWE-862
TI-2025-12605 CVE-2025-13790 · GHSA-xhgr-j9vw-353q

Scada-LTS cross-site request forgery

Priority MEDIUM 57

A vulnerability was determined in Scada-LTS up to 2.7.8.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00289 Published 2025-11-30 No fix listed CWE-352
TI-2025-08600 CVE-2025-9388 · GHSA-rqrp-cc48-87gx

Scada-LTS watch_list.shtm cross site scripting

Priority MEDIUM 56

A vulnerability was determined in Scada-LTS up to 2.7.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-08-24 No fix listed CWE-79
TI-2025-08465 CVE-2025-9233 · GHSA-x63v-jgq4-rh76

Scada-LTS view_edit.shtm cross site scripting

Priority MEDIUM 56

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-08-20 No fix listed CWE-79
TI-2025-08378 CVE-2025-9138 · GHSA-jgpr-9q6r-xpg6

Scada-LTS new cross site scripting

Priority MEDIUM 56

A vulnerability was found in Scada-LTS 2.7.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00296 Published 2025-08-19 No fix listed CWE-79
TI-2025-07054 CVE-2025-7729 · GHSA-2cp2-9mq6-4h2w

Scada-LTS usersProfiles.shtm cross site scripting

Priority LOW 23

A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0033 Published 2025-07-17 No fix listed CWE-79
TI-2025-07053 CVE-2025-7728 · GHSA-p383-92r7-352c

Scada-LTS users.shtm cross site scripting

Priority MEDIUM 56

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0033 Published 2025-07-17 No fix listed CWE-79
TI-2024-07323 CVE-2024-7901 · GHSA-c8hq-rc43-979q

Scada-LTS Message Scada cross site scripting

Priority LOW 24

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00359 Published 2024-08-17 No fix listed CWE-79
TI-2023-16541 CVE-2023-33472 · GHSA-vxvg-fm2c-8444

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote…

Priority HIGH 73

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0127 Published 2024-01-13 No fix listed CWE-94
TI-2022-20316 CVE-2022-41976 · GHSA-xf2c-w6qx-wghm

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows…

Priority MEDIUM 46

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role (e.g., to administrator) by updating th…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01554 Published 2023-04-10 No fix listed