WE
Product
Webaccess/nms
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 8Medium 3Low 0
Watch
Add Webaccess/nms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10603 | 8.8 | Apr 9 | WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely Affected: before 3.0.2 |
| CVE-2018-8841 | 7.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2020-10629 | 7.5 | Apr 9 | WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input Affected: before 3.0.2 |
| CVE-2020-10617 | 7.5 | Apr 9 | There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information Affected: before 3.0.2 |
| CVE-2018-7503 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7501 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-7495 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
| CVE-2018-10590 | 7.5 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 2.0.3 |
Showing 8