Priority MEDIUM 41
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls based on the POST body parameters c0-scriptN…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00482 · Published 2026-09-16 · No fix listed CWE-639
Priority LOW 29
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00365 · Published 2026-09-16 · No fix listed CWE-89
Priority MEDIUM 42
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00838 · Published 2026-09-16 · No fix listed CWE-94
Priority LOW 27
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00278 · Published 2026-08-12 · No fix listed CWE-79
Priority MEDIUM 43
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to execute arbitrary operating system comma…
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.0052 · Published 2026-08-12 · No fix listed CWE-862
Priority MEDIUM 57
A vulnerability was identified in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00519 · Published 2025-11-30 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was determined in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00289 · Published 2025-11-30 · No fix listed CWE-352
Priority LOW 22
A flaw has been found in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00304 · Published 2025-09-11 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability was detected in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00319 · Published 2025-09-10 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability was identified in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00293 · Published 2025-08-25 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was determined in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-24 · No fix listed CWE-79
Priority MEDIUM 56
A flaw has been found in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-20 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was detected in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-20 · No fix listed CWE-79
Priority MEDIUM 56
A security vulnerability has been detected in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-20 · No fix listed CWE-79
Priority MEDIUM 56
A security vulnerability has been detected in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A weakness has been identified in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00377 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A security flaw has been discovered in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00377 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was determined in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00345 · Published 2025-08-19 · No fix listed CWE-200
Priority MEDIUM 56
A vulnerability was found in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00296 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability has been found in Scada-LTS 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00302 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00324 · Published 2025-08-08 · No fix listed CWE-79
Priority LOW 23
A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0033 · Published 2025-07-17 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0033 · Published 2025-07-17 · No fix listed CWE-79
Priority LOW 24
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00359 · Published 2024-08-17 · No fix listed CWE-79
Priority HIGH 73
An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0127 · Published 2024-01-13 · No fix listed CWE-94
Load more
THREATIST.IORead the docs