WE
Product
WebAccess/SCADA
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 19Medium 10Low 0
Watch
Add WebAccess/SCADA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22674 | 6.5 | Aug 10 | The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA… Affected: before 8.4.5; 9.0 before 9.0.1 |
| CVE-2021-32954 | 6.5 | Jun 18 | Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the file system Affected: through 9.0.1 |
| CVE-2021-22676 | 6.1 | Aug 10 | UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code Affected: before 8.4.5; 9.0 before 9.0.1 |
| CVE-2021-32956 | 6.1 | Jun 18 | Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a… Affected: through 9.0.1 |
| CVE-2021-27436 | 6.1 | Mar 18 | WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could… Affected: through 9.0 |
| CVE-2018-10591 | 6.1 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: before 8.3.1 |
| CVE-2025-14848 | 5.3 | Dec 18 | Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files Affected: 9.2.1 |
| CVE-2018-5445 | 5.3 | Jan 25 | A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817 Affected: before 8.2_20170817 |
| CVE-2018-5443 | 5.3 | Jan 25 | A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817 Affected: before 8.2_20170817 |
| CVE-2021-38431 | 4.3 | Oct 15 | An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users Affected: through 9.0.3 |
Showing 10