Advisories · Technology
Advantech Co., Ltd. WISE-DeviceOn Server.
Every CVE that names Advantech Co., Ltd. WISE-DeviceOn Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass
- Advantech Co., Ltd. WISE-DeviceOn Server
- Hard-coded credentials
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined
- Advantech Co., Ltd. WISE-DeviceOn Server
- Cross-site scripting (XSS)