Search vulnerabilities

Results 2

Export CSV
CVE-2016-4522

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 6.3% KEV · Not listed
CVE-2016-4531

Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

CVSS 3.0 · 7.3 High EPSS 8.2% KEV · Not listed