Webaccess/vpn vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WE

Product

Webaccess/vpn

by Advantech · last CVE Nov 6, 2025

12

CVEs

0

On KEV

7.2

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 1Medium 11Low 0

Severity

All severities12 Critical0 High1 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Webaccess/vpn to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-34247	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in NetworksController.addNetworkAction() that allows an authenticated low-privileged observer… Affected: before 1.1.5
CVE-2025-34246	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction() that allows an authenticated low-privileged… Affected: before 1.1.5
CVE-2025-34245	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction() that allows an authenticated… Affected: before 1.1.5
CVE-2025-34244	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxDeviceFwRulesAction() that allows an authenticated… Affected: before 1.1.5
CVE-2025-34243	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxNetworkFwRulesAction() that allows an authenticated… Affected: before 1.1.5
CVE-2025-34242	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction() that allows an authenticated low-privileged observer… Affected: before 1.1.5
CVE-2025-34241	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxDeviceController.ajaxDeviceAction() that allows an authenticated low-privileged… Affected: before 1.1.5
CVE-2025-34240	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AppManagementController.appUpgradeAction() that allows an authenticated low-privileged… Affected: before 1.1.5
CVE-2025-34238	6.5	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() that allows an… Affected: before 1.1.5
CVE-2025-34237	5.4	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction() Affected: before 1.1.5
CVE-2025-34236	5.4	0%	Nov 6	Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via NetworksController.addNetworkAction() Affected: before 1.1.5