Known vulnerabilities in WebAccess Dashboard

Vendor: Advantech Co., Ltd
Software: WebAccess Dashboard
Software CPE: cpe:2.3:a:advantech:webaccess_dashboard:*:*:*:*:*:*:*:*
Website: https://www.advantech.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebAccess Dashboard WebAccess Dashboard is affected by 11 known vulnerabilities: 5 high, 6 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12759 - Improper Privilege Management
CVE-2018-8841		 CWE-269 Low
No
No
 - 16.05.2018 SB2018051607
#VU12758 - Origin Validation Error
CVE-2018-10591		 CWE-346 Low
No
No
 - 16.05.2018 SB2018051607
#VU12757 - External Control of File Name or Path
CVE-2018-7495		 CWE-73 Low
No
No
 - 16.05.2018 SB2018051607
#VU12756 - Untrusted Pointer Dereference
CVE-2018-7497		 CWE-822 High
No
No
 - 16.05.2018 SB2018051607
#VU12755 - Heap-based Buffer Overflow
CVE-2018-8845		 CWE-122 High
No
No
 - 16.05.2018 SB2018051607
#VU12754 - Stack-based buffer overflow
CVE-2018-7499		 CWE-121 High
No
No
 - 16.05.2018 SB2018051607
#VU12753 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-10589		 CWE-22 High
No
No
 - 16.05.2018 SB2018051607
#VU12752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-7503		 CWE-22 Low
No
No
 - 16.05.2018 SB2018051607
#VU12751 - Improper Authorization
CVE-2018-7505		 CWE-285 High
No
No
 - 16.05.2018 SB2018051607
#VU12750 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10590		 CWE-200 Low
No
No
 - 16.05.2018 SB2018051607
#VU12749 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-7501		 CWE-89 Low
No
No
 - 15.05.2018 SB2018051607