Filtered by vendor Advantech Subscriptions
Filtered by product Webaccess Subscriptions
Total 103 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-34540 1 Advantech 1 Webaccess 2024-08-04 6.1 Medium
Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.
CVE-2023-4215 1 Advantech 1 Webaccess 2024-08-02 6.5 Medium
Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.
CVE-2023-2866 1 Advantech 1 Webaccess 2024-08-02 7.3 High
If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.