Advisories · Technology

Advantech WebAccess.

Every CVE that names Advantech WebAccess among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-4215 CVE record

CVSS 6.5 Medium

Advantech WebAccess Debug Messages Revealing Unnecessary Information
- Advantech WebAccess
- CWE-1295
Not analysed yet 16 Oct 2023
CVE-2021-38389 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 18 Oct 2021
CVE-2021-33023 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 18 Oct 2021
CVE-2021-38408 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 9 Sept 2021
CVE-2019-3942 CVE record

Improper access control in Advantech WebAccess
- Advantech WebAccess
- Broken access control
Not analysed yet 1 Apr 2020
CVE-2020-10607 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 27 Mar 2020
CVE-2019-3941 CVE record

Advantech WebAccess: Advantech WebAccess 8.3.4 allows unauthenticated…
- Advantech WebAccess
Not analysed yet 9 Apr 2019
CVE-2019-3940 CVE record

Unrestricted file upload in Advantech WebAccess
- Advantech WebAccess
- Unrestricted file upload
Not analysed yet 9 Apr 2019
CVE-2018-15707 CVE record

Advantech WebAccess: Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the…
- Advantech WebAccess
Not analysed yet 31 Oct 2018
CVE-2018-15706 CVE record

Advantech WebAccess: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated…
- Advantech WebAccess
Not analysed yet 31 Oct 2018
CVE-2018-15705 CVE record

Advantech WebAccess: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated…
- Advantech WebAccess
Not analysed yet 31 Oct 2018
CVE-2018-14828 CVE record

Improper privilege management in Advantech WebAccess
- Advantech WebAccess
- Privilege escalation
Not analysed yet 23 Oct 2018
CVE-2018-14820 CVE record

External control of a file path in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 23 Oct 2018
CVE-2018-14816 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 23 Oct 2018
CVE-2018-14806 CVE record

Path traversal in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 23 Oct 2018
CVE-2018-15704 CVE record

Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability.
- Advantech WebAccess
Not analysed yet 22 Oct 2018
CVE-2018-15703 CVE record

Advantech WebAccess: Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site…
- Advantech WebAccess
Not analysed yet 22 Oct 2018
CVE-2018-8845 CVE record

Heap-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 15 May 2018
CVE-2018-8841 CVE record

Improper privilege management in Advantech WebAccess
- Advantech WebAccess
- Privilege escalation
Not analysed yet 15 May 2018
CVE-2018-7505 CVE record

Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…
- Advantech WebAccess
- CWE-264
Not analysed yet 15 May 2018
CVE-2018-7503 CVE record

Path traversal in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 15 May 2018
CVE-2018-7501 CVE record

SQL injection in Advantech WebAccess
- Advantech WebAccess
- SQL injection
Not analysed yet 15 May 2018
CVE-2018-7499 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 15 May 2018
CVE-2018-7497 CVE record

Untrusted pointer dereference in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 15 May 2018
CVE-2018-7495 CVE record

External control of a file path in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 15 May 2018
CVE-2018-10591 CVE record

Origin validation error in Advantech WebAccess
- Advantech WebAccess
- CWE-346
Not analysed yet 15 May 2018
CVE-2018-10590 CVE record

Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…
- Advantech WebAccess
- CWE-548
Not analysed yet 15 May 2018
CVE-2018-10589 CVE record

Path traversal in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 15 May 2018
CVE-2017-16736 CVE record

Unrestricted file upload in Advantech WebAccess
- Advantech WebAccess
- Unrestricted file upload
Not analysed yet 12 Jan 2018
CVE-2017-16732 CVE record

Use after free in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Jan 2018
CVE-2017-16753 CVE record

Improper input validation in Advantech WebAccess
- Advantech WebAccess
- CWE-20
Not analysed yet 5 Jan 2018
CVE-2017-16728 CVE record

Untrusted pointer dereference in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 5 Jan 2018
CVE-2017-16724 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 5 Jan 2018
CVE-2017-16720 CVE record

Path traversal in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 5 Jan 2018
CVE-2017-16716 CVE record

SQL injection in Advantech WebAccess
- Advantech WebAccess
- SQL injection
Not analysed yet 5 Jan 2018
CVE-2017-14016 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 6 Nov 2017
CVE-2017-12719 CVE record

Untrusted pointer dereference in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 6 Nov 2017
CVE-2017-12717 CVE record

Uncontrolled search path in Advantech WebAccess
- Advantech WebAccess
- CWE-427
Not analysed yet 30 Aug 2017
CVE-2017-12713 CVE record

Incorrect permission assignment in Advantech WebAccess
- Advantech WebAccess
- Broken access control
Not analysed yet 30 Aug 2017
CVE-2017-12711 CVE record

Advantech WebAccess: An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions…
- Advantech WebAccess
- Privilege escalation
Not analysed yet 30 Aug 2017
CVE-2017-12710 CVE record

SQL injection in Advantech WebAccess
- Advantech WebAccess
- SQL injection
Not analysed yet 30 Aug 2017
CVE-2017-12708 CVE record

Buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 30 Aug 2017
CVE-2017-12706 CVE record

Stack-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 30 Aug 2017
CVE-2017-12704 CVE record

Heap-based buffer overflow in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 30 Aug 2017
CVE-2017-12702 CVE record

Uncontrolled format string in Advantech WebAccess
- Advantech WebAccess
- Memory corruption
Not analysed yet 30 Aug 2017
CVE-2017-12698 CVE record

Improper authentication in Advantech WebAccess
- Advantech WebAccess
- Authentication bypass
Not analysed yet 30 Aug 2017
CVE-2017-7929 CVE record

Path traversal in Advantech WebAccess
- Advantech WebAccess
- Path traversal
Not analysed yet 6 May 2017
CVE-2014-2368 CVE record

CVSS 7.5 High

Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting
- Advantech WebAccess
- CWE-623
Not analysed yet 19 Jul 2014
CVE-2014-2367 CVE record

CVSS 7.5 High

Advantech WebAccess Authentication Bypass Issues
- Advantech WebAccess
- CWE-592
Not analysed yet 19 Jul 2014
CVE-2014-2366 CVE record

CVSS 9.0 HighCritical · CVSS 9+

Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
- Advantech WebAccess
- CWE-316
Not analysed yet 19 Jul 2014
CVE-2014-2365 CVE record

CVSS 6.5 Medium

Advantech WebAccess Improper Access Control
- Advantech WebAccess
- Broken access control
Not analysed yet 19 Jul 2014
CVE-2014-2364 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Advantech WebAccess Stack-Based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 19 Jul 2014
CVE-2014-0773 CVE record

CVSS 7.5 High

Advantech WebAccess Command Injection
- Advantech WebAccess
- Command injection
Not analysed yet 12 Apr 2014
CVE-2014-0772 CVE record

CVSS 5.0 Medium

Advantech WebAccess File and Directory Information Exposure
- Advantech WebAccess
- Information disclosure
Not analysed yet 12 Apr 2014
CVE-2014-0771 CVE record

CVSS 7.5 High

Advantech WebAccess File and Directory Information Exposure
- Advantech WebAccess
- Information disclosure
Not analysed yet 12 Apr 2014
CVE-2014-0770 CVE record

CVSS 7.5 High

Advantech WebAccess Stack-based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Apr 2014
CVE-2014-0768 CVE record

CVSS 7.5 High

Advantech WebAccess Stack-based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Apr 2014
CVE-2014-0767 CVE record

CVSS 7.5 High

Advantech WebAccess Stack-based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Apr 2014
CVE-2014-0766 CVE record

CVSS 7.5 High

Advantech WebAccess Stack-based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Apr 2014
CVE-2014-0765 CVE record

CVSS 7.5 High

Advantech WebAccess Stack-based Buffer Overflow
- Advantech WebAccess
- Memory corruption
Not analysed yet 12 Apr 2014