Advantech / WebAccess/VPN
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-34247 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction() | MEDIUM | 5.1 | Nov 6, 2025 |
| CVE-2025-34246 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction() | MEDIUM | 5.3 | Nov 6, 2025 |
| CVE-2025-34245 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction() | MEDIUM | 5.3 | Nov 6, 2025 |
| CVE-2025-34244 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction() | MEDIUM | 5.3 | Nov 6, 2025 |
| CVE-2025-34243 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction() | MEDIUM | 5.3 | Nov 6, 2025 |
| CVE-2025-34242 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction() | HIGH | 8.6 | Nov 6, 2025 |
| CVE-2025-34241 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction() | MEDIUM | 5.3 | Nov 6, 2025 |
| CVE-2025-34240 | Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction() | HIGH | 8.6 | Nov 6, 2025 |
| CVE-2025-34239 | Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction() | HIGH | 8.6 | Nov 6, 2025 |
| CVE-2025-34238 | Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() | MEDIUM | 6.9 | Nov 6, 2025 |
| CVE-2025-34237 | Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction() | MEDIUM | 6.3 | Nov 6, 2025 |
| CVE-2025-34236 | Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction() | MEDIUM | 6.2 | Nov 6, 2025 |
Showing 1 to 12 of 12 CVEs