Advisories · Technology

Advantech WebAccess/SCADA.

Every CVE that names Advantech WebAccess/SCADA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-6888 CVE record

CVSS 7.2 High

SQL Injection Vulnerability
- Advantech SaaS Composer
- Advantech IoTSuite Growth Linux docker
- SQL injection
Not analysed yet 13 May 2026
CVE-2025-67653 CVE record

CVSS 5.3 Medium

Advantech WebAccess/SCADA Path Traversal
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 18 Dec 2025
CVE-2025-46268 CVE record

CVSS 5.3 Medium

Advantech WebAccess/SCADA SQL Injection
- Advantech WebAccess/SCADA
- SQL injection
Not analysed yet 18 Dec 2025
CVE-2025-14848 CVE record

CVSS 5.3 Medium

Advantech WebAccess/SCADA Absolute Path Traversal
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 18 Dec 2025
CVE-2025-14849 CVE record

CVSS 8.7 High

Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type
- Advantech WebAccess/SCADA
- Unrestricted file upload
Not analysed yet 18 Dec 2025
CVE-2025-14850 CVE record

CVSS 7.2 High

Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 18 Dec 2025
CVE-2024-2453 CVE record

CVSS 6.4 Medium

Advantech WebAccess/SCADA SQL Injection
- Advantech WebAccess/SCADA
- SQL injection
Not analysed yet 21 Mar 2024
CVE-2023-1437 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2023-1437
- Advantech WebAccess/SCADA
- Memory corruption
Not analysed yet 2 Aug 2023
CVE-2023-2866 CVE record

CVSS 7.3 High

Advantech WebAccess Insufficient Type Distinction
- Advantech WebAccess/SCADA
- CWE-351
Not analysed yet 7 Jun 2023
CVE-2023-22450 CVE record

CVSS 7.2 High

Unrestricted file upload in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Unrestricted file upload
Not analysed yet 5 Jun 2023
CVE-2023-32540 CVE record

CVSS 7.2 High

Code injection in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Code injection
Not analysed yet 5 Jun 2023
CVE-2023-32628 CVE record

CVSS 7.2 High

Unrestricted file upload in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Unrestricted file upload
Not analysed yet 5 Jun 2023
CVE-2021-38431 CVE record

CVSS 4.3 Medium

Advantech WebAccess SCADA
- Advantech WebAccess SCADA
- Broken access control
Not analysed yet 15 Oct 2021
CVE-2021-32954 CVE record

Path traversal in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 18 Jun 2021
CVE-2021-32956 CVE record

Open redirect in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Open redirect
Not analysed yet 18 Jun 2021
CVE-2021-22669 CVE record

Incorrect permission assignment in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Broken access control
Not analysed yet 26 Apr 2021
CVE-2021-27436 CVE record

Cross-site scripting in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Cross-site scripting (XSS)
Not analysed yet 18 Mar 2021
CVE-2020-25161 CVE record

External control of a file path in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 23 Feb 2021
CVE-2019-3951 CVE record

Stack-based buffer overflow in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Memory corruption
Not analysed yet 12 Dec 2019
CVE-2019-3975 CVE record

Advantech WebAccess/SCADA: Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote…
- Advantech WebAccess/SCADA
Not analysed yet 10 Sept 2019
CVE-2019-3954 CVE record

Advantech WebAccess/SCADA: Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote…
- Advantech WebAccess/SCADA
Not analysed yet 18 Jun 2019
CVE-2019-3953 CVE record

Advantech WebAccess/SCADA: Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote…
- Advantech WebAccess/SCADA
Not analysed yet 18 Jun 2019
CVE-2019-6554 CVE record

Improper access control in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Broken access control
Not analysed yet 5 Apr 2019
CVE-2019-6550 CVE record

Stack-based buffer overflow in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Memory corruption
Not analysed yet 5 Apr 2019
CVE-2019-6552 CVE record

Command injection in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Command injection
Not analysed yet 5 Apr 2019
CVE-2018-5445 CVE record

Path traversal in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- Path traversal
Not analysed yet 25 Jan 2018
CVE-2018-5443 CVE record

SQL injection in Advantech WebAccess/SCADA
- Advantech WebAccess/SCADA
- SQL injection
Not analysed yet 25 Jan 2018