Advisories · Technology
Tridium Niagara Enterprise Security.
Every CVE that names Tridium Niagara Enterprise Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.2 Medium
Program Module Vulnerability
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-280
- CVSS 7.2 High
Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- Command injection
- CVSS 7.2 High
Incorrect Permission Assignment for Critical Resource
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- Broken access control
- CVSS 4.1 Medium
Use of GET Request Method With sensitive Query Strings
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-598
- CVSS 4.3 Medium
Improper Output Neutralization for Logs
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- Other injection
- CVSS 5.4 Medium
Improper Handling of Windows: DATA Alternate Data Stream
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-69
- CVSS 5.3 Medium
Improper Use of Validation Framework
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-1173
- CVSS 5.3 Medium
Observable Response Discrepancy
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-204
- CVSS 6.8 Medium
Missing Cryptographic Step
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- CWE-325
- CVSS 7.7 High
Use of Password Hash with Insufficient Computational Effort
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- Weak cryptography or TLS
- CVSS 6.5 Medium
Incorrect Permission Assignment for Critical Resource
- Tridium Niagara Framework
- Tridium Niagara Enterprise Security
- Broken access control