Known vulnerabilities in Advantech WebAccess

Vendor: Advantech Co., Ltd
Software: Advantech WebAccess
Software CPE: cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 147
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Advantech WebAccess Advantech WebAccess is affected by 147 known vulnerabilities: 73 high, 34 medium, 40 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81987 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4215		 CWE-200 Medium
No
No
 9.1.4 13.10.2023 SB2023101312
#VU57332 - Stack-based buffer overflow
CVE-2021-38389		 CWE-121 High
No
No
 9.1.1 13.10.2021 SB2021101312
#VU57331 - Heap-based Buffer Overflow
CVE-2021-33023		 CWE-122 High
No
No
 9.1.1 13.10.2021 SB2021101312
#VU56288 - Stack-based buffer overflow
CVE-2021-38408		 CWE-121 High
No
No
 9.1.1 03.09.2021 SB2021090301
#VU27664 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27663 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27662 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27661 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27660 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27659 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27658 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27657 - Memory corruption
CVE-2020-12022		 CWE-119 High
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU27656 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Low
No
No
 - 11.05.2020 SB2020051108
#VU27655 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Low
No
No
 - 11.05.2020 SB2020051108
#VU27654 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-12014		 CWE-89 Low
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU27653 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27652 - Stack-based buffer overflow
 CWE-121 High
No
No
 - 11.05.2020 SB2020051108
#VU27651 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 High
No
No
 - 11.05.2020 SB2020051108
#VU27650 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12026		 CWE-22 High
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU27649 - Out-of-bounds read
CVE-2020-12018		 CWE-125 Low
No
No
 - 11.05.2020 SB2020051108


Showing elements 1 - 20 out of 147