Known vulnerabilities in Advantech WebAccess - page 3

Vendor: Advantech Co., Ltd
Software: Advantech WebAccess
Software CPE: cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 147
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Advantech WebAccess Advantech WebAccess is affected by 147 known vulnerabilities: 73 high, 34 medium, 40 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27675 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12010		 CWE-22 Medium
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU27628 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27627 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27626 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27625 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27624 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27623 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27622 - Heap-based Buffer Overflow
 CWE-122 High
No
No
 - 11.05.2020 SB2020051108
#VU27621 - Heap-based Buffer Overflow
CVE-2020-10638		 CWE-122 High
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU27620 - Command injection
 CWE-77 High
No
No
 - 11.05.2020 SB2020051108
#VU27619 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 High
No
No
 - 11.05.2020 SB2020051108
#VU27618 - Command injection
CVE-2020-12006		 CWE-77 High
No
No
 8.4.4_P0320844, 9.0.0_P0320900 11.05.2020 SB2020051108
#VU26421 - Stack-based buffer overflow
CVE-2020-10607		 CWE-121 High
No
No
 8.4.4 27.03.2020 SB2020032714
#VU21202 - Improper Authorization
CVE-2019-13550		 CWE-285 High
No
No
 8.4.2 19.09.2019 SB2019091908
#VU21201 - Stack-based buffer overflow
CVE-2019-13556		 CWE-121 High
No
No
 8.4.2 19.09.2019 SB2019091908
#VU21200 - Command injection
CVE-2019-13552		 CWE-77 High
No
No
 8.4.2 19.09.2019 SB2019091908
#VU21196 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-13558		 CWE-94 High
No
No
 8.4.2 18.09.2019 SB2019091908
#VU17220 - Authentication Bypass Using an Alternate Path or Channel
CVE-2019-6521		 CWE-288 Low
No
No
 8.3.5 25.01.2019 SB2019012511
#VU17219 - Improper Authentication
CVE-2019-6519		 CWE-287 Low
No
No
 8.3.5 25.01.2019 SB2019012511
#VU17218 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-6523		 CWE-89 Low
No
No
 8.3.5 24.01.2019 SB2019012511


Showing elements 41 - 60 out of 147