Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority LOW 26

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.0019 Published 2025-07-10 Fixed in ValveLink 14.0 CWE-20
Priority LOW 26

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00194 Published 2025-07-10 Fixed in ValveLink 14.0 CWE-427
Priority LOW 38

Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

CVSS 4.0HIGH 8.5 Local No auth No interaction EPSS 0.00197 Published 2025-07-10 Fixed in ValveLink 14.0 CWE-693