Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 44

Export CSV
CVE-2012-1235

Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.

CVSS 2.0 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Advantech
Products
Advantech Webaccess
CVE-2013-2299

Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Advantech
Products
Advantech Webaccess
CVE-2012-0242

Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.

CVSS 2.0 · 10.0 Critical EPSS 6.9% KEV · Not listed
Vendors
Advantech
Products
Advantech Webaccess
CVE-2012-0240

GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 4.1% KEV · Not listed
Vendors
Advantech
Products
Advantech Webaccess