# ABB NEXUS Series. Every CVE that names ABB NEXUS Series among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Stored Absolute Path Traversal](https://agentprime.io/advisories/CVE-2024-13945.md) `CVE-2024-13945` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.4 High · Not analysed yet · Published 23 May 2025 · Tags: Path traversal - [Weak Password Storage](https://agentprime.io/advisories/CVE-2024-51552.md) `CVE-2024-51552` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.1 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-257 - [Stored Cross Site Scripting](https://agentprime.io/advisories/CVE-2024-13958.md) `CVE-2024-13958` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 4.6 Medium · Not analysed yet · Published 22 May 2025 · Tags: Cross-site scripting (XSS) - [SSRF Server Side Request Forgery](https://agentprime.io/advisories/CVE-2024-13957.md) `CVE-2024-13957` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.0 High · Not analysed yet · Published 22 May 2025 · Tags: Server-side request forgery (SSRF) - [SSL Verification Bypass](https://agentprime.io/advisories/CVE-2024-13956.md) `CVE-2024-13956` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 22 May 2025 · Tags: Weak cryptography or TLS - [SQL Injection 2nd Order](https://agentprime.io/advisories/CVE-2024-13955.md) `CVE-2024-13955` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2025 · Tags: SQL injection - [Serialization / Deserialization of configuration data](https://agentprime.io/advisories/CVE-2024-13954.md) `CVE-2024-13954` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 22 May 2025 · Tags: Information disclosure - [Sensitive Information disclosed in log files](https://agentprime.io/advisories/CVE-2024-13953.md) `CVE-2024-13953` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: Information disclosure - [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-13952.md) `CVE-2024-13952` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 22 May 2025 · Tags: Code injection - [Predictable Filename](https://agentprime.io/advisories/CVE-2024-51553.md) `CVE-2024-51553` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.0 High · Not analysed yet · Published 22 May 2025 · Tags: Path traversal - [One way hash with predictable salt](https://agentprime.io/advisories/CVE-2024-13951.md) `CVE-2024-13951` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 22 May 2025 · Tags: CWE-760 - [Log Injection](https://agentprime.io/advisories/CVE-2024-13950.md) `CVE-2024-13950` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: Cross-site scripting (XSS) - [Log Forging](https://agentprime.io/advisories/CVE-2024-13949.md) `CVE-2024-13949` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: Other injection - [LARGECONTENT - device disk overutilization](https://agentprime.io/advisories/CVE-2024-48848.md) `CVE-2024-48848` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.0 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-774 - [Insecure Permissions](https://agentprime.io/advisories/CVE-2024-13948.md) `CVE-2024-13948` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: Broken access control - [External System or Configuration Control](https://agentprime.io/advisories/CVE-2024-13947.md) `CVE-2024-13947` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.1 High · Not analysed yet · Published 22 May 2025 · Tags: Broken access control - [Binary Planting / LoadLibrary DLL's not Signed](https://agentprime.io/advisories/CVE-2024-13946.md) `CVE-2024-13946` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.1 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-427 - [Authenticated Relative Path Traversal](https://agentprime.io/advisories/CVE-2024-13931.md) `CVE-2024-13931` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.5 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-606 - [Authenticated Unchecked Loop Condition](https://agentprime.io/advisories/CVE-2024-13930.md) `CVE-2024-13930` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: CWE-606 - [Authenticated Servlet Command Injection](https://agentprime.io/advisories/CVE-2024-13929.md) `CVE-2024-13929` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.5 High · Not analysed yet · Published 22 May 2025 · Tags: Code injection - [Authenticated SQL Injection](https://agentprime.io/advisories/CVE-2024-13928.md) `CVE-2024-13928` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.5 High · Not analysed yet · Published 22 May 2025 · Tags: Code injection - [Admin Authorized File Upload and Execute PHP](https://agentprime.io/advisories/CVE-2025-30169.md) `CVE-2025-30169` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.0 Medium · Not analysed yet · Published 22 May 2025 · Tags: Unrestricted file upload - [Admin Authorized File Upload](https://agentprime.io/advisories/CVE-2025-30173.md) `CVE-2025-30173` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 6.0 Medium · Not analysed yet · Published 22 May 2025 · Tags: Unrestricted file upload - [Admin Authorized Remote Code Execution](https://agentprime.io/advisories/CVE-2025-30172.md) `CVE-2025-30172` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.9 High · Not analysed yet · Published 22 May 2025 · Tags: Code injection - [Admin Authorized System File Deletion](https://agentprime.io/advisories/CVE-2025-30171.md) `CVE-2025-30171` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.3 High · Not analysed yet · Published 22 May 2025 · Tags: Broken access control - [Admin Authorized Exposure of file path, file size or file existence](https://agentprime.io/advisories/CVE-2025-30170.md) `CVE-2025-30170` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 22 May 2025 · Tags: Information disclosure - [Admin Authorized System File corruption](https://agentprime.io/advisories/CVE-2025-2409.md) `CVE-2025-2409` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.9 High · Not analysed yet · Published 22 May 2025 · Tags: Path traversal - [Admin Authorized Port (iptables) manipulation (open/close/disable ports)](https://agentprime.io/advisories/CVE-2025-2410.md) `CVE-2025-2410` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.9 High · Not analysed yet · Published 22 May 2025 · Tags: CWE-99 - [Authenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2024-9639.md) `CVE-2024-9639` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.5 High · Not analysed yet · Published 22 May 2025 · Tags: Code injection - [Authenticated Absolute Path Traversal](https://agentprime.io/advisories/CVE-2024-48850.md) `CVE-2024-48850` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.5 High · Not analysed yet · Published 22 May 2025 · Tags: Path traversal - [Authenticated Escalation to guest to root](https://agentprime.io/advisories/CVE-2024-48853.md) `CVE-2024-48853` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2025 · Tags: CWE-286 - [Credentials Disclosure - keys](https://agentprime.io/advisories/CVE-2024-51547.md) `CVE-2024-51547` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Feb 2025 · Tags: Hard-coded credentials - [Force Change of Default Credentials](https://agentprime.io/advisories/CVE-2024-51555.md) `CVE-2024-51555` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1393 - [off-by-one-error](https://agentprime.io/advisories/CVE-2024-51554.md) `CVE-2024-51554` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-193 - [Default Credentials](https://agentprime.io/advisories/CVE-2024-51551.md) `CVE-2024-51551` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287 - [Data Validation / Sanitization](https://agentprime.io/advisories/CVE-2024-51550.md) `CVE-2024-51550` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287 - [Absolute Path Traversal](https://agentprime.io/advisories/CVE-2024-51549.md) `CVE-2024-51549` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Path traversal - [Dangerous File Upload](https://agentprime.io/advisories/CVE-2024-51548.md) `CVE-2024-51548` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: Unrestricted file upload - [Credentails Disclosure](https://agentprime.io/advisories/CVE-2024-51546.md) `CVE-2024-51546` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-1287 - [Username Enumeration](https://agentprime.io/advisories/CVE-2024-51545.md) `CVE-2024-51545` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Hard-coded credentials - [Service Control](https://agentprime.io/advisories/CVE-2024-51544.md) `CVE-2024-51544` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-15 - [Information Disclosure](https://agentprime.io/advisories/CVE-2024-51543.md) `CVE-2024-51543` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-15 - [Configuration Download](https://agentprime.io/advisories/CVE-2024-51542.md) `CVE-2024-51542` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: Information disclosure - [Local File Inclusion](https://agentprime.io/advisories/CVE-2024-51541.md) `CVE-2024-51541` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: File inclusion - [MD5 bypass operation](https://agentprime.io/advisories/CVE-2024-48847.md) `CVE-2024-48847` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: Weak cryptography or TLS - [Cross Side Request Forgery, CSRF](https://agentprime.io/advisories/CVE-2024-48846.md) `CVE-2024-48846` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.1 High · Not analysed yet · Published 5 Dec 2024 · Tags: Cross-site request forgery (CSRF) - [Weak Password Rules/Strength](https://agentprime.io/advisories/CVE-2024-48845.md) `CVE-2024-48845` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Hard-coded credentials - [Denial of Service, DoS](https://agentprime.io/advisories/CVE-2024-48844.md) `CVE-2024-48844` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.2 High · Not analysed yet · Published 5 Dec 2024 · Tags: Denial of service - [Denial of Service, DoS](https://agentprime.io/advisories/CVE-2024-48843.md) `CVE-2024-48843` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 7.6 High · Not analysed yet · Published 5 Dec 2024 · Tags: Denial of service - [Unauthorized Access](https://agentprime.io/advisories/CVE-2024-48840.md) `CVE-2024-48840` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Code injection - [Remote Code Execution, RCE](https://agentprime.io/advisories/CVE-2024-48839.md) `CVE-2024-48839` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Code injection - [PHP Session Fixation](https://agentprime.io/advisories/CVE-2024-11317.md) `CVE-2024-11317` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Authentication bypass - [Filesize Check](https://agentprime.io/advisories/CVE-2024-11316.md) `CVE-2024-11316` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: Denial of service - [SSRF Server Side Request Forgery](https://agentprime.io/advisories/CVE-2024-6784.md) `CVE-2024-6784` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: Server-side request forgery (SSRF) - [Cross Site Scripting XSS](https://agentprime.io/advisories/CVE-2024-6516.md) `CVE-2024-6516` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: Cross-site scripting (XSS) - [unauthorized file access](https://agentprime.io/advisories/CVE-2024-6515.md) `CVE-2024-6515` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.7 High · Not analysed yet · Published 5 Dec 2024 · Tags: Weak cryptography or TLS - [unauthorized file access](https://agentprime.io/advisories/CVE-2024-6209.md) `CVE-2024-6209` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 5 Jul 2024 · Tags: Information disclosure - [remote code execution](https://agentprime.io/advisories/CVE-2024-6298.md) `CVE-2024-6298` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-1287 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .