Login Request a demo
WE
Product
Webaccess
by Advantech · last CVE Oct 17, 2023
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities103In the news0Timeline
Severity mix
Critical 41High 46Medium 13Low 0
Severity
All severities103Critical41High46Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webaccess to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4525
6.6
0%
Jun 25
Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors,…
Affected: through 8.1
CVE-2018-15706
6.5
32%
Oct 31
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the…
Affected: 8.3.1; 8.3.2
CVE-2018-15705
6.5
12%
Oct 31
WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal…
Affected: 8.3.1; 8.3.2
CVE-2017-16732
6.5
1%
Jan 12
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3
Affected: before 8.3
CVE-2017-14016
6.3
16%
Nov 6
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Affected: before 8.2_20170817
CVE-2021-34540
6.1
1%
Jun 11
Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard
Affected: 8.4.2; 8.4.4
CVE-2018-15703
6.1
1%
Oct 22
Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities
Affected: through 8.3.2
CVE-2018-10591
6.1
1%
May 15
In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
Affected: through 8.2_20170817; through 8.3.0
CVE-2018-15707
5.4
2%
Oct 31
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page
Affected: 8.3.1; 8.3.2
CVE-2015-3948
5.4
1%
Jan 15
Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors
Affected: through 8.0
CVE-2015-3943
5.3
2%
Jan 15
Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors
Affected: through 8.0
CVE-2016-4528
5.0
1%
Jun 25
Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file
Affected: through 8.1
CVE-2016-5810
4.9
15%
May 2
upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors
Affected: through 8.1
Showing 13