Wise-deviceon Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WS

Product

Wise-deviceon Server

by Advantech · last CVE Dec 5, 2025

11

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 0Medium 10Low 0

Severity

All severities11 Critical1 High0 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Wise-deviceon Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-34266	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint Affected: before 5.4
CVE-2025-34265	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint Affected: before 5.4
CVE-2025-34264	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/dog/{agentId} endpoint Affected: before 5.4
CVE-2025-34263	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint Affected: before 5.4
CVE-2025-34262	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devices/name/{agent_id} endpoint Affected: before 5.4
CVE-2025-34261	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicegroups/ endpoint Affected: before 5.4
CVE-2025-34260	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/schedule endpoint Affected: before 5.4
CVE-2025-34259	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/building endpoint Affected: before 5.4
CVE-2025-34258	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/plan endpoint Affected: before 5.4
CVE-2025-34257	5.4	0%	Dec 5	Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/defined endpoint Affected: before 5.4