Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Advisory: Tridium Niagara Enterprise Security, Niagara Framework — docs.niagara-community.com/category/tech_bull Clear all filters
TI-2025-03488 CVE-2025-3944 · GHSA-8xr7-6x2j-wgq9

Incorrect permission assignment in Tridium Niagara Framework

Priority MEDIUM 43

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-732
TI-2025-03487 CVE-2025-3943 · GHSA-j46h-hw72-jxqh

Use of GET Request Method With sensitive Query Strings

Priority MEDIUM 46

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11383 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-598
TI-2025-03485 CVE-2025-3941 · GHSA-q524-5rg8-2j6p

Improper Handling of Windows: DATA Alternate Data Stream

Priority MEDIUM 43

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-69
TI-2025-03484 CVE-2025-3940 · GHSA-5c2w-vf3p-r6vw

Improper Use of Validation Framework

Priority MEDIUM 48

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00373 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-1173
TI-2025-03483 CVE-2025-3939 · GHSA-6hrx-7mgg-5cvp

Observable response discrepancy in Tridium Niagara Framework

Priority LOW 30

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-204
TI-2025-03482 CVE-2025-3938 · GHSA-hcrg-qr57-hr37

Broken or risky cryptographic algorithm in Tridium Niagara Framework

Priority MEDIUM 42

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00331 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-325
TI-2025-03481 CVE-2025-3937 · GHSA-jr34-3463-3cxq

Use of Password Hash with Insufficient Computational Effort

Priority MEDIUM 42

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00337 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-916
TI-2025-03480 CVE-2025-3936 · GHSA-prr2-m2fh-3hv6

Incorrect permission assignment in Tridium Niagara Framework

Priority MEDIUM 42

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00366 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-732