Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Tridium Niagara Enterprise Security, Niagara Framework — honeywell.com/us/en/product-security Clear all filters
TI-2025-03487 CVE-2025-3943 · GHSA-j46h-hw72-jxqh

Use of GET Request Method With sensitive Query Strings

Priority MEDIUM 46

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11383 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-598
TI-2025-03484 CVE-2025-3940 · GHSA-5c2w-vf3p-r6vw

Improper Use of Validation Framework

Priority MEDIUM 48

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00373 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-1173
TI-2025-03483 CVE-2025-3939 · GHSA-6hrx-7mgg-5cvp

Observable response discrepancy in Tridium Niagara Framework

Priority LOW 30

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00329 Published 2025-05-22 Fixed in 4.14.2, 4.15.1 +1 CWE-204