Vulnerabilities (CVE)

Filtered by vendor Advantech Subscribe
Filtered by product Advantech Webaccess
Total 44 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-0235 1 Advantech 1 Advantech Webaccess 2025-04-11 6.0 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2012-0234 1 Advantech 1 Advantech Webaccess 2025-04-11 7.5 HIGH N/A
SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.
CVE-2012-0237 1 Advantech 1 Advantech Webaccess 2025-04-11 6.4 MEDIUM N/A
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via a crafted URL.
CVE-2011-4522 1 Advantech 1 Advantech Webaccess 2025-04-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.