# CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

## Records, newest first (an older page)

- [Uncontrolled search path in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module](https://agentprime.io/advisories/CVE-2020-7474.md)
  `CVE-2020-7474` · CVE record: ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module · No CVSS score · Not analysed yet · Published 23 Mar 2020 · Tags: CWE-427
- [Uncontrolled search path in Dell Client Consumer and Commercial Platforms](https://agentprime.io/advisories/CVE-2020-5324.md)
  `CVE-2020-5324` · CVE record: Dell Dell Client Consumer and Commercial Platforms · CVSS 7.1 High · Not analysed yet · Published 21 Feb 2020 · Tags: CWE-427
- [Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability](https://agentprime.io/advisories/CVE-2020-3153.md)
  `CVE-2020-3153` · CVE record: Cisco Cisco AnyConnect Secure Mobility Client · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV, ransomware · EPSS 0.29 · Not analysed yet · Published 19 Feb 2020 · Tags: CWE-427
- [Uncontrolled search path in MSX Configurator (Software Version prior to V1.0.8.1)](https://agentprime.io/advisories/CVE-2019-6858.md)
  `CVE-2019-6858` · CVE record: MSX Configurator (Software Version prior to V1.0.8.1) · No CVSS score · Not analysed yet · Published 22 Jan 2020 · Tags: CWE-427
- [Uncontrolled search path in Dell Command Configure (DCC)](https://agentprime.io/advisories/CVE-2019-18575.md)
  `CVE-2019-18575` · CVE record: Dell Dell Command Configure (DCC) · CVSS 7.1 High · Not analysed yet · Published 6 Dec 2019 · Tags: CWE-427
- [Uncontrolled search path in Dell Command Update (DCU)](https://agentprime.io/advisories/CVE-2019-3750.md)
  `CVE-2019-3750` · CVE record: Dell Dell Command Update (DCU) · CVSS 5.6 Medium · Not analysed yet · Published 3 Dec 2019 · Tags: CWE-427
- [Uncontrolled search path in Dell Command Update (DCU)](https://agentprime.io/advisories/CVE-2019-3749.md)
  `CVE-2019-3749` · CVE record: Dell Dell Command Update (DCU) · CVSS 5.6 Medium · Not analysed yet · Published 3 Dec 2019 · Tags: CWE-427
- [Cisco Webex Teams for Windows DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2019-16001.md)
  `CVE-2019-16001` · CVE record: Cisco Cisco Webex Teams · CVSS 5.3 Medium · Not analysed yet · Published 26 Nov 2019 · Tags: CWE-427
- [Uncontrolled search path in Dell Encryption Enterprise and others](https://agentprime.io/advisories/CVE-2019-3745.md)
  `CVE-2019-3745` · CVE record: Dell Dell Encryption Enterprise and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 7 Oct 2019 · Tags: CWE-427
- [Rapid7 InsightAppSec Local Privilege Escalation](https://agentprime.io/advisories/CVE-2019-5631.md)
  `CVE-2019-5631` · CVE record: Rapid7 InsightAppSec · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2019 · Tags: CWE-427
- [Uncontrolled search path in Adobe After Effects](https://agentprime.io/advisories/CVE-2019-8062.md)
  `CVE-2019-8062` · CVE record: Adobe Adobe After Effects · CVSS 7.8 High · Not analysed yet · Published 14 Aug 2019 · Tags: CWE-427
- [Uncontrolled search path in ProClima all versions prior to version 8.0.0](https://agentprime.io/advisories/CVE-2019-6825.md)
  `CVE-2019-6825` · CVE record: ProClima ProClima all versions prior to version 8.0.0 · No CVSS score · Not analysed yet · Published 15 Jul 2019 · Tags: CWE-427
- [Uncontrolled search path in Rapid7 Insight Agent](https://agentprime.io/advisories/CVE-2019-5629.md)
  `CVE-2019-5629` · CVE record: Rapid7 Insight Agent · CVSS 7.8 High · Not analysed yet · Published 13 Jul 2019 · Tags: CWE-427
- [Uncontrolled search path in GE Communicator](https://agentprime.io/advisories/CVE-2019-6546.md)
  `CVE-2019-6546` · CVE record: GE Communicator · No CVSS score · Not analysed yet · Published 9 May 2019 · Tags: CWE-427
- [Uncontrolled search path in GE Communicator](https://agentprime.io/advisories/CVE-2019-6564.md)
  `CVE-2019-6564` · CVE record: GE Communicator · No CVSS score · Not analysed yet · Published 9 May 2019 · Tags: CWE-427
- [Cisco Directory Connector Search Order Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2019-1794.md)
  `CVE-2019-1794` · CVE record: Cisco Cisco Directory Connector · CVSS 5.1 Medium · Not analysed yet · Published 18 Apr 2019 · Tags: CWE-427
- [Uncontrolled search path in Gemalto Sentinel UltraPro](https://agentprime.io/advisories/CVE-2019-6534.md)
  `CVE-2019-6534` · CVE record: Gemalto Sentinel UltraPro · No CVSS score · Not analysed yet · Published 11 Apr 2019 · Tags: CWE-427
- [Uncontrolled search path in Schneider Electric OFS v3.5](https://agentprime.io/advisories/CVE-2015-1014.md)
  `CVE-2015-1014` · CVE record: Schneider Electric OFS v3.5 · No CVSS score · Not analysed yet · Published 25 Mar 2019 · Tags: CWE-427
- [Cisco Advanced Malware Protection for Endpoints on Windows DLL Preloading Vulnerability](https://agentprime.io/advisories/CVE-2018-15452.md)
  `CVE-2018-15452` · CVE record: Cisco Cisco AMP for Endpoints · CVSS 5.5 Medium · Not analysed yet · Published 13 Nov 2018 · Tags: CWE-427
- [Uncontrolled search path in Fuji Electric Energy Savings Estimator](https://agentprime.io/advisories/CVE-2018-14812.md)
  `CVE-2018-14812` · CVE record: Fuji Electric Energy Savings Estimator · No CVSS score · Not analysed yet · Published 24 Oct 2018 · Tags: CWE-427
- [Uncontrolled search path in Siemens AG SIEMENS TD Keypad Designer](https://agentprime.io/advisories/CVE-2018-13806.md)
  `CVE-2018-13806` · CVE record: Siemens AG SIEMENS TD Keypad Designer · No CVSS score · Not analysed yet · Published 12 Sept 2018 · Tags: CWE-427
- [Uncontrolled search path in Emerson DeltaV DCS](https://agentprime.io/advisories/CVE-2018-14797.md)
  `CVE-2018-14797` · CVE record: Emerson DeltaV DCS · No CVSS score · Not analysed yet · Published 23 Aug 2018 · Tags: CWE-427
- [Uncontrolled search path in Adobe ColdFusion ColdFusion Update 5 and earlier versions…](https://agentprime.io/advisories/CVE-2018-4938.md)
  `CVE-2018-4938` · CVE record: Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions · CVSS 7.8 High · Not analysed yet · Published 19 May 2018 · Tags: CWE-427
- [Uncontrolled search path in ICS-CERT Advantech WebAccess Versions 8.1 and prior.](https://agentprime.io/advisories/CVE-2017-5175.md)
  `CVE-2017-5175` · CVE record: ICS-CERT Advantech WebAccess Versions 8.1 and prior. · No CVSS score · Not analysed yet · Published 9 May 2018 · Tags: CWE-427
- [Uncontrolled search path in SpiderControl MicroBrowser](https://agentprime.io/advisories/CVE-2017-14010.md)
  `CVE-2017-14010` · CVE record: SpiderControl MicroBrowser · No CVSS score · Not analysed yet · Published 26 Apr 2018 · Tags: CWE-427
- [Uncontrolled search path in Vyaire Medical CareFusion Upgrade Utility Vulnerability](https://agentprime.io/advisories/CVE-2018-5457.md)
  `CVE-2018-5457` · CVE record: Vyaire Medical CareFusion Upgrade Utility Vulnerability · No CVSS score · Not analysed yet · Published 6 Feb 2018 · Tags: CWE-427
- [Uncontrolled search path in Moxa SoftNVR-IA Live Viewer](https://agentprime.io/advisories/CVE-2017-5170.md)
  `CVE-2017-5170` · CVE record: Moxa SoftNVR-IA Live Viewer · No CVSS score · Not analysed yet · Published 18 Jan 2018 · Tags: CWE-427
- [Uncontrolled search path in Cisco FindIT Discovery Utility](https://agentprime.io/advisories/CVE-2017-12314.md)
  `CVE-2017-12314` · CVE record: Cisco FindIT Discovery Utility · No CVSS score · Not analysed yet · Published 16 Nov 2017 · Tags: CWE-427
- [Uncontrolled search path in Cisco Network Academy Packet Tracer](https://agentprime.io/advisories/CVE-2017-12313.md)
  `CVE-2017-12313` · CVE record: Cisco Network Academy Packet Tracer · No CVSS score · Not analysed yet · Published 16 Nov 2017 · Tags: CWE-427
- [Uncontrolled search path in AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) and others](https://agentprime.io/advisories/CVE-2017-14020.md)
  `CVE-2017-14020` · CVE record: AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) and 4 more · No CVSS score · Not analysed yet · Published 13 Nov 2017 · Tags: CWE-427
- [Uncontrolled search path in Trihedral Engineering Limited VTScada](https://agentprime.io/advisories/CVE-2017-14029.md)
  `CVE-2017-14029` · CVE record: Trihedral Engineering Limited VTScada · No CVSS score · Not analysed yet · Published 6 Nov 2017 · Tags: CWE-427
- [Uncontrolled search path in Progea Movicon SCADA/HMI](https://agentprime.io/advisories/CVE-2017-14017.md)
  `CVE-2017-14017` · CVE record: Progea Movicon SCADA/HMI · No CVSS score · Not analysed yet · Published 19 Oct 2017 · Tags: CWE-427
- [Uncontrolled search path in AzeoTech DAQFactory](https://agentprime.io/advisories/CVE-2017-5147.md)
  `CVE-2017-5147` · CVE record: AzeoTech DAQFactory · No CVSS score · Not analysed yet · Published 9 Sept 2017 · Tags: CWE-427
- [Uncontrolled search path in Synology Cloud Station Drive](https://agentprime.io/advisories/CVE-2017-11158.md)
  `CVE-2017-11158` · CVE record: Synology Cloud Station Drive · No CVSS score · Not analysed yet · Published 31 Aug 2017 · Tags: CWE-427
- [Uncontrolled search path in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12717.md)
  `CVE-2017-12717` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: CWE-427
- [Uncontrolled search path in Synology Photo Station Uploader](https://agentprime.io/advisories/CVE-2017-11159.md)
  `CVE-2017-11159` · CVE record: Synology Photo Station Uploader · No CVSS score · Not analysed yet · Published 23 Aug 2017 · Tags: CWE-427
- [Uncontrolled search path in Rockwell Automation Connected Components Workbench](https://agentprime.io/advisories/CVE-2017-5176.md)
  `CVE-2017-5176` · CVE record: Rockwell Automation Connected Components Workbench · No CVSS score · Not analysed yet · Published 19 May 2017 · Tags: CWE-427
- [Uncontrolled search path in BLF-Tech LLC VisualView HMI](https://agentprime.io/advisories/CVE-2017-6051.md)
  `CVE-2017-6051` · CVE record: BLF-Tech LLC VisualView HMI · No CVSS score · Not analysed yet · Published 8 May 2017 · Tags: CWE-427
- [Uncontrolled search path in Schneider Electric Interactive Graphical SCADA System Software](https://agentprime.io/advisories/CVE-2017-6033.md)
  `CVE-2017-6033` · CVE record: Schneider Electric Interactive Graphical SCADA System Software · No CVSS score · Not analysed yet · Published 7 Apr 2017 · Tags: CWE-427

Newest: <https://agentprime.io/advisories/tag/cwe-427.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-427&cursor=WyIyMDIwLTA0LTIxVDE3OjUwOjExLjAwMDAwMFoiLCJDVkUtMjAyMC04ODk1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-427/?cursor=WyIyMDIwLTA0LTIxVDE3OjUwOjExLjAwMDAwMFoiLCJDVkUtMjAyMC04ODk1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.