Known vulnerabilities in Advantech WebAccess 8.0_20150816 - page 4

Vendor: Advantech Co., Ltd

Software: Advantech WebAccess

Version: 8.0_20150816

Software CPE: cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*

Website: https://www.advantech.com/

Total vulnerabilities: 72

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Vulnerabilities (72)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU9113 - Untrusted Pointer Dereference CVE-2017-12719	CWE-822	High	No	No	-	03.11.2017	SB2017110305
#VU9112 - Stack-based buffer overflow CVE-2017-14016	CWE-121	High	Public exploit available	No	-	03.11.2017	SB2017110305
#VU8044 - Incorrect Permission Assignment for Critical Resource CVE-2017-12713	CWE-732	Low	No	No	-	30.08.2017	SB2017083003
#VU8043 - Incorrect Privilege Assignment CVE-2017-12711	CWE-266	Low	No	No	-	30.08.2017	SB2017083003
#VU8042 - Untrusted Search Path CVE-2017-12717	CWE-426	Low	No	No	-	30.08.2017	SB2017083003
#VU8041 - Improper Authentication CVE-2017-12698	CWE-287	High	No	No	-	30.08.2017	SB2017083003
#VU8040 - Use of Externally-Controlled Format String CVE-2017-12702	CWE-134	High	No	No	-	30.08.2017	SB2017083003
#VU8039 - Heap-based Buffer Overflow CVE-2017-12704	CWE-122	High	No	No	-	30.08.2017	SB2017083003
#VU8038 - Stack-based buffer overflow CVE-2017-12706	CWE-121	High	No	No	-	30.08.2017	SB2017083003
#VU8037 - Memory corruption CVE-2017-12708	CWE-119	High	No	No	-	30.08.2017	SB2017083003
#VU8036 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-12710	CWE-89	Low	No	No	-	30.08.2017	SB2017083003
#VU6608 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-7929	CWE-22	Medium	No	No	-	19.05.2017	SB2017051902

Showing elements 61 - 80 out of 72