Known vulnerabilities in APROL

Known vulnerabilities in APROL

Vendor: B&R Industrial Automation GmbH

Software: APROL

Software CPE: cpe:2.3:a:b_and_r_industrial_automation_gmbh:aprol:*:*:*:*:*:*:*:*

Website: https://www.br-automation.com/en/

Total vulnerabilities: 19

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU137312 - Untrusted Search Path CVE-2026-6901	CWE-426	Low	No	No	R 4.4-01P5	10.07.2026	SB2026071035
#VU137311 - Improper Certificate Validation CVE-2026-6900	CWE-295	High	No	No	R 4.4-01P5	10.07.2026	SB2026071035
#VU107009 - External Control of File Name or Path CVE-2024-10210	CWE-73	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10208	CWE-79	Low	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107007 - Server-Side Request Forgery (SSRF) CVE-2024-10207	CWE-918	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107006 - Server-Side Request Forgery (SSRF) CVE-2024-10206	CWE-918	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107005 - Incorrect Implementation of Authentication Algorithm CVE-2024-8314	CWE-303	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107004 - Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2024-8313	CWE-497	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107003 - Allocation of Resources Without Limits or Throttling CVE-2024-45484	CWE-770	Medium	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107002 - Permissions, Privileges, and Access Controls CVE-2024-8315	CWE-264	Low	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107001 - Improper Control of Generation of Code ('Code Injection') CVE-2024-45480	CWE-94	High	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU107000 - Incomplete Filtering of Special Elements CVE-2024-45481	CWE-791	Low	No	No	4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU106999 - Inclusion of Functionality from Untrusted Control Sphere CVE-2024-45482	CWE-829	Low	No	No	4.4-00P1, 4.4-00P5, 4.4-01	04.04.2025	SB2025040450
#VU106995 - Incorrect Permission Assignment for Critical Resource CVE-2024-10209	CWE-732	Low	No	No	4.4-01	04.04.2025	SB2025040450
#VU106991 - Missing Authentication for Critical Function CVE-2024-45483	CWE-306	Low	No	No	4.4-01	04.04.2025	SB2025040450
#VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337	CWE-264	High	No	No	R 4.4-01P5	20.12.2024	SB2024122063 SB2025011311 SB2025011801 and 45 more
#VU101814 - Permissions, Privileges, and Access Controls CVE-2024-50379	CWE-264	Medium	Available	No	R 4.4-01P5	17.12.2024	SB2024121745 SB2024121905 SB2024122055 and 57 more
#VU101813 - Resource exhaustion CVE-2024-54677	CWE-400	Medium	No	No	R 4.4-01P5	17.12.2024	SB2024121745 SB2024121905 SB2024122055 and 13 more
#VU100587 - Resource Management Errors CVE-2024-52317	CWE-399	Medium	Available	No	R 4.4-01P5	18.11.2024	SB2024111823 SB2024112550 SB2024121231 and 27 more