advantech Vulnerability Advisory Catalog

Total 378 security vulnerabilities recorded for advantech software and firmware.

← Back to All Vendors
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction() that allows a...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxDeviceFwRulesAction() that allows a...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxNetworkFwRulesAction() that allows ...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction() that allows an authenticat...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxDeviceController.ajaxDeviceAction() that allows an authen...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AppManagementController.appUpgradeAction() that allows an aut...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in AppManagementController.appUpgradeAction() that allows an...

📅 2025-11-06
CVSS 7.2 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfi...

📅 2025-11-06
CVSS 6.5 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via StandaloneVpnClientsController.addStanda...

📅 2025-11-06
CVSS 5.4 Dossier →
Component: webaccess\/vpn

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via NetworksController.addNetworkAction(). I...

📅 2025-11-06
CVSS 5.4 Dossier →
Component: iview

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypas...

📅 2025-11-06
CVSS 7.2 Dossier →
Component: iview

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypas...

📅 2025-11-06
CVSS 7.5 Dossier →
CVE-2022-50593 CRITICAL
Component: iview

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypas...

📅 2025-11-06
CVSS 9.8 Dossier →
Component: iview

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypas...

📅 2025-11-06
CVSS 7.2 Dossier →
CVE-2022-50591 CRITICAL
Component: iview

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypas...

📅 2025-11-06
CVSS 9.8 Dossier →
Component: iview

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By m...

📅 2025-07-11
CVSS 5.4 Dossier →
Component: iview

A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue r...

📅 2025-07-11
CVSS 8.8 Dossier →
Component: iview

A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authent...

📅 2025-07-11
CVSS 6.5 Dossier →
Component: iview

A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). Thi...

📅 2025-07-11
CVSS 8.8 Dossier →
Component: iview

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By e...

📅 2025-07-11
CVSS 5.4 Dossier →
Component: iview

A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This i...

📅 2025-07-11
CVSS 8.8 Dossier →
Component: iview

A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can...

📅 2025-07-11
CVSS 7.6 Dossier →
Component: iview

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue req...

📅 2025-07-11
CVSS 4.3 Dossier →
Component: iview

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By m...

📅 2025-07-11
CVSS 5.4 Dossier →
Page 2 of 16 (378 Total Records)