Known vulnerabilities in Advantech WebAccess - page 5

Vendor: Advantech Co., Ltd
Software: Advantech WebAccess
Software CPE: cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 147
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Advantech WebAccess Advantech WebAccess is affected by 147 known vulnerabilities: 73 high, 34 medium, 40 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12759 - Improper Privilege Management
CVE-2018-8841		 CWE-269 Low
No
No
 - 16.05.2018 SB2018051607
#VU10222 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-5445		 CWE-22 Low
No
No
 - 25.01.2018 SB2018012507
#VU10221 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-5443		 CWE-89 Low
No
No
 - 23.01.2018 SB2018012507
#VU9893 - Improper input validation
CVE-2017-16753		 CWE-20 Low
No
No
 - 09.01.2018 SB2018010418
#VU9891 - Stack-based buffer overflow
CVE-2017-16720		 CWE-121 Low
Available
No
 - 09.01.2018 SB2018010418
#VU9890 - Stack-based buffer overflow
CVE-2017-16724		 CWE-121 Low
No
No
 - 09.01.2018 SB2018010418
#VU9889 - Untrusted Pointer Dereference
CVE-2017-16728		 CWE-822 Low
No
No
 - 09.01.2018 SB2018010418
#VU9892 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-16716		 CWE-89 Low
Available
No
 - 04.01.2018 SB2018010418
#VU9113 - Untrusted Pointer Dereference
CVE-2017-12719		 CWE-822 High
No
No
 - 03.11.2017 SB2017110305
#VU9112 - Stack-based buffer overflow
CVE-2017-14016		 CWE-121 High
Available
No
 - 03.11.2017 SB2017110305
#VU8044 - Incorrect Permission Assignment for Critical Resource
CVE-2017-12713		 CWE-732 Low
No
No
 - 30.08.2017 SB2017083003
#VU8043 - Incorrect Privilege Assignment
CVE-2017-12711		 CWE-266 Low
No
No
 - 30.08.2017 SB2017083003
#VU8042 - Untrusted Search Path
CVE-2017-12717		 CWE-426 Low
No
No
 - 30.08.2017 SB2017083003
#VU8041 - Improper Authentication
CVE-2017-12698		 CWE-287 High
No
No
 - 30.08.2017 SB2017083003
#VU8040 - Use of Externally-Controlled Format String
CVE-2017-12702		 CWE-134 High
No
No
 - 30.08.2017 SB2017083003
#VU8039 - Heap-based Buffer Overflow
CVE-2017-12704		 CWE-122 High
No
No
 - 30.08.2017 SB2017083003
#VU8038 - Stack-based buffer overflow
CVE-2017-12706		 CWE-121 High
No
No
 - 30.08.2017 SB2017083003
#VU8037 - Memory corruption
CVE-2017-12708		 CWE-119 High
No
No
 - 30.08.2017 SB2017083003
#VU8036 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-12710		 CWE-89 Low
No
No
 - 30.08.2017 SB2017083003
#VU6608 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-7929		 CWE-22 Medium
No
No
 - 19.05.2017 SB2017051902


Showing elements 81 - 100 out of 147