NE
Product
Niagara Enterprise Security
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 2Medium 4Low 0
Watch
Add Niagara Enterprise Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3945 | 9.8 | May 22 | Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3944 | 9.8 | May 22 | Incorrect Permission Assignment for Critical Resource Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3941 | 9.8 | May 22 | Improper Handling of Windows: DATA Alternate Data Stream Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3940 | 9.8 | May 22 | Improper Use of Validation Framework Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3938 | 9.8 | May 22 | Missing Cryptographic Step Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3937 | 9.8 | May 22 | Use of Password Hash with Insufficient Computational Effort Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3936 | 9.8 | May 22 | Incorrect Permission Assignment for Critical Resource Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3943 | 7.5 | May 22 | Use of GET Request Method With sensitive Query Strings Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2025-3942 | 7.5 | May 22 | Improper Output Neutralization for Logs Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2018-18985 | 5.4 | Jan 29 | Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2,… Affected: before 2.3.118.6; 2.3u1 |
| CVE-2025-3939 | 5.3 | May 22 | Observable Response Discrepancy Affected: before 4.14.2; before 4.15.1; before 4.10.11 |
| CVE-2026-11804 | 5.2 | Jul 23 | Program Module Vulnerability Affected: before 4.14.6; before 4.15.5 |
| CVE-2020-14483 | 4.3 | Aug 13 | A timeout during a TLS handshake can result in the connection failing to terminate Affected: 2.4.31; 2.4.45; 4.8.0.35 |
Showing 13