Known vulnerabilities in Experion Process Knowledge System C200E
Vendor:
Honeywell International, Inc
Software:
Experion Process Knowledge System C200E
Software CPE:
cpe:2.3:h:honeywell_international:experion_process_knowledge_system_c200e:*:*:*:*:*:*:*:*
Website:
https://www.honeywell.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU57090 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-38399 |
CWE-22 | Medium | - | 06.10.2021 |
SB2021100608 |
||
| #VU57089 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2021-38395 |
CWE-74 | High | - | 06.10.2021 |
SB2021100608 |
||
| #VU57088 - Unrestricted Upload of File with Dangerous Type CVE-2021-38397 |
CWE-434 | High | - | 06.10.2021 |
SB2021100608 |