WebCTRL
Automated Logic · 3 CVEs
CVE-2025-14295
HIGH
Automated Logic WebCTRL and Carrier i-Vu Session Fixation
Jan 22, 2026
CVE-2024-5540
MEDIUM
ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting
Nov 27, 2025
CVE-2024-5539
CRITICAL
ALC WebCTRL Carrier i-Vu Access Control Bypass
Nov 27, 2025
CVE-2025-0657
HIGH
ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range
Nov 27, 2025
CVE-2024-8528
MEDIUM
ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter
Nov 19, 2025
CVE-2024-8527
HIGH
ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter
Nov 19, 2025
CVE-2024-8525
CRITICAL
Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload
Nov 21, 2024
CVE-2021-31682
MEDIUM
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for r…
Oct 22, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-14295 | Automated Logic WebCTRL and Carrier i-Vu Session Fixation | HIGH | 0.16% | Jan 22, 2026 |
| CVE-2024-5540 | ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting | MEDIUM | 0.31% | Nov 27, 2025 |
| CVE-2024-5539 | ALC WebCTRL Carrier i-Vu Access Control Bypass | CRITICAL | 0.33% | Nov 27, 2025 |
| CVE-2025-0657 | ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range | HIGH | 0.34% | Nov 27, 2025 |
| CVE-2024-8528 | ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter | MEDIUM | 0.12% | Nov 19, 2025 |
| CVE-2024-8527 | ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter | HIGH | 0.16% | Nov 19, 2025 |
| CVE-2024-8525 | Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload | CRITICAL | 1.42% | Nov 21, 2024 |
| CVE-2021-31682 | The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operator… | MEDIUM | 10.51% | Oct 22, 2021 |
Showing 1 to 3 of 3 CVEs