Known vulnerabilities in Ignition

Software: Ignition
Software CPE: cpe:2.3:a:facade.company:ignition:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ignition Ignition is affected by 10 known vulnerabilities: 1 high, 5 medium, 4 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58392 - Improper Access Control
CVE-2021-43996
CWE-284 Medium
No
No
1.6.15, 2.0.6 26.11.2021 SB2021112613
#VU49661 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3129
CWE-94 High
Available
Exploited
1.6.15, 2.5.2, 1.16.14 12.01.2021 SB2021011904
SB2021011905
SB2021021402
#VU45650 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.3.6 12.08.2020 SB2020081263
#VU29018 - Exposure of sensitive information to an unauthorized actor
CVE-2020-13909
CWE-200 Medium
No
No
2.0.5 15.06.2020 SB2020061515
#VU40845 - Credentials Management
CVE-2015-0995
CWE-255 Medium
No
No
- 03.04.2015 SB2015040302
#VU40846 - Security Features
CVE-2015-0994
CWE-254 Low
No
No
- 03.04.2015 SB2015040302
#VU40847 - Security Features
CVE-2015-0993
CWE-254 Medium
No
No
- 03.04.2015 SB2015040302
#VU40848 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0992
CWE-200 Low
No
No
- 03.04.2015 SB2015040302
#VU40849 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0991
CWE-200 Medium
No
No
- 03.04.2015 SB2015040302
#VU40850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0976
CWE-79 Low
No
No
- 03.04.2015 SB2015040302