Known vulnerabilities in Ignition

Known vulnerabilities in Ignition

Vendor: Inductive Automation

Software: Ignition

Software CPE: cpe:2.3:a:inductive_automation:ignition:*:*:*:*:*:*:*:*

Website: https://inductiveautomation.com/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU86753 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50232	CWE-94	High	No	No	8.1.35	23.02.2024	SB2024010815
#VU86752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-50233	CWE-22	High	No	No	8.1.35	23.02.2024	SB2024010815
#VU85061 - Deserialization of Untrusted Data CVE-2023-50219	CWE-502	Medium	No	No	8.1.35	08.01.2024	SB2024010815
#VU85060 - Deserialization of Untrusted Data CVE-2023-50220	CWE-502	Low	No	No	8.1.35	08.01.2024	SB2024010815
#VU85059 - Deserialization of Untrusted Data CVE-2023-50221	CWE-502	High	No	No	8.1.35	08.01.2024	SB2024010815
#VU85058 - Deserialization of Untrusted Data CVE-2023-50222	CWE-502	High	No	No	8.1.35	08.01.2024	SB2024010815
#VU85057 - Deserialization of Untrusted Data CVE-2023-50223	CWE-502	Medium	No	No	8.1.35	08.01.2024	SB2024010815
#VU84609 - Deserialization of Untrusted Data CVE-2023-50218	CWE-502	Medium	No	No	-	20.12.2023	SB2023122023
#VU78920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-38121	CWE-79	Low	No	No	8.1.26	03.08.2023	SB2023080325
#VU78919 - Improper Authentication CVE-2023-38122	CWE-287	Low	No	No	8.1.26	03.08.2023	SB2023080325
#VU78918 - Missing Authentication for Critical Function CVE-2023-38123	CWE-306	Medium	No	No	8.1.26	03.08.2023	SB2023080325
#VU78914 - Exposed Dangerous Method or Function CVE-2023-38124	CWE-749	Low	No	No	8.1.26	03.08.2023	SB2023080325
#VU65802 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-1704	CWE-611	Low	No	No	7.9.21, 8.1.9	27.07.2022	SB2022072701
#VU65393 - Improper Control of Generation of Code ('Code Injection') CVE-2022-35873	CWE-94	High	No	No	7.9.20, 8.1.17	18.07.2022	SB2022071816
#VU65392 - Deserialization of Untrusted Data CVE-2022-35872	CWE-502	High	No	No	7.9.20, 8.1.17	18.07.2022	SB2022071816
#VU65389 - Missing Authentication for Critical Function CVE-2022-35871	CWE-306	High	No	No	7.9.20, 8.1.17	18.07.2022	SB2022071816
#VU65386 - Deserialization of Untrusted Data CVE-2022-35870	CWE-502	Medium	No	No	7.9.20, 8.1.17	18.07.2022	SB2022071816
#VU65384 - Improper Authentication CVE-2022-35869	CWE-287	Medium	No	No	7.9.20, 8.1.17	18.07.2022	SB2022071816
#VU62285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-1264	CWE-22	Low	No	No	8.1.10	13.04.2022	SB2022041317