Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Release: Advantech iView 5.7.05 build 7057 Clear all filters
TI-2025-33454 CVE-2025-53509 · GHSA-pw4m-7r53-w9mr

Advantech iView Argument Injection

Priority LOW 31

A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase().

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00346 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-88
TI-2025-32587 CVE-2025-52459 · GHSA-5fcw-f94j-49qx

Advantech iView Argument Injection

Priority LOW 31

A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet.backupDatabase().

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00329 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-88
TI-2025-33460 CVE-2025-53515 · GHSA-v7pq-8p73-84vh

Advantech iView SQL Injection

Priority MEDIUM 41

A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00614 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-32672 CVE-2025-52577 · GHSA-5fv5-hvwx-g2h9

Advantech iView SQL Injection

Priority MEDIUM 41

A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00614 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-33420 CVE-2025-53475 · GHSA-p75w-2vvm-8gvr

Advantech iView SQL Injection

Priority MEDIUM 50

A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage().

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07431 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-29375 CVE-2025-46704 · GHSA-v8qj-6www-vvm2

Advantech iView Path Traversal

Priority LOW 33

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05682 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-22
TI-2025-31041 CVE-2025-48891 · GHSA-4rw3-6f54-wc25

Advantech iView SQL Injection

Priority LOW 31

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00316 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-89
TI-2025-27603 CVE-2025-41442 · GHSA-9h6g-gh32-jqrj

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79
TI-2025-33463 CVE-2025-53519 · GHSA-723m-6rjg-vjjf

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79
TI-2025-33348 CVE-2025-53397 · GHSA-5g82-9fvm-8qhf

Advantech iView Cross-site Scripting

Priority LOW 23

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00232 Published 2025-07-10 Fixed in 5.7.05 build 7057 CWE-79