Filtered by vendor Advantech Subscriptions
Filtered by product Webaccess/scada Subscriptions
Total 8 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-36226 1 Advantech 1 Webaccess/scada 2026-05-22 6.1 Medium
Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component
CVE-2026-6888 1 Advantech 8 Ecowatch Saas-composer, Iot Edge Linux Docker, Iot Edge Windows and 5 more 2026-05-13 7.2 High
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.
CVE-2024-2453 1 Advantech 1 Webaccess/scada 2026-04-15 6.4 Medium
There is an SQL injection vulnerability in Advantech WebAccess/SCADA software that allows an authenticated attacker to remotely inject SQL code in the database. Successful exploitation of this vulnerability could allow an attacker to read or modify data on the remote database.
CVE-2025-14848 1 Advantech 2 Webaccess/scada, Webaccess\/scada 2025-12-31 4.3 Medium
Advantech WebAccess/SCADA is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.
CVE-2025-14849 1 Advantech 2 Webaccess/scada, Webaccess\/scada 2025-12-31 8.8 High
Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
CVE-2025-14850 1 Advantech 2 Webaccess/scada, Webaccess\/scada 2025-12-31 8.1 High
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
CVE-2025-46268 1 Advantech 2 Webaccess/scada, Webaccess\/scada 2025-12-31 6.3 Medium
Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
CVE-2025-67653 1 Advantech 2 Webaccess/scada, Webaccess\/scada 2025-12-31 4.3 Medium
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.