Known vulnerabilities in iView

Vendor: Advantech Co., Ltd
Software: iView
Software CPE: cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 32
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iView iView is affected by 32 known vulnerabilities: 13 high, 15 medium, 4 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112866 - Argument Injection or Modification
CVE-2025-53509		 CWE-88 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112865 - Argument Injection or Modification
CVE-2025-52459		 CWE-88 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112864 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53515		 CWE-89 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112863 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-52577		 CWE-89 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112862 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53475		 CWE-89 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112861 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-46704		 CWE-22 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112860 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-48891		 CWE-89 Medium
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41442		 CWE-79 Low
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53519		 CWE-79 Low
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU112857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53397		 CWE-79 Low
No
No
 5.7.05 7057 11.07.2025 SB20250711130
#VU78789 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-3983		 CWE-89 Medium
No
No
 5.7.04.6752 31.07.2023 SB2023073127
#VU67709 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-3323		 CWE-89 High
No
No
 5.7.04.6583 27.09.2022 SB2022092751
#VU64787 - Command injection
CVE-2022-2143		 CWE-77 High
Available
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64784 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-2139		 CWE-22 Medium
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64783 - Missing Authentication for Critical Function
CVE-2022-2138		 CWE-306 High
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64782 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-2142		 CWE-89 High
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64779 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-2137		 CWE-89 Low
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64776 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-2136		 CWE-89 Medium
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU64775 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-2135		 CWE-89 Medium
No
No
 5.7.04.6469 29.06.2022 SB2022062918
#VU53814 - Missing Authentication for Critical Function
CVE-2021-32930		 CWE-306 High
No
No
 5.7.03.6182 04.06.2021 SB2021060407


Showing elements 1 - 20 out of 32