Webaccess Security Vulnerabilities and Issues — Webaccess CVE List

Lucene search

AdvantechWebaccess

4 matches found

CVE•added 2016/01/15 3:59 a.m.•52 views

CVE-2015-3948

Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5.1AI score0.00274EPSS

CVE•added 2018/10/31 10:29 p.m.•48 views

CVE-2018-15707

Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.

5.4CVSS5.5AI score0.01123EPSS

CVE•added 2016/01/15 3:59 a.m.•46 views

CVE-2015-3943

Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors.

5.3CVSS5.3AI score0.00315EPSS

CVE•added 2016/06/25 1:59 a.m.•36 views

CVE-2016-4528

Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.

5CVSS5.5AI score0.00141EPSS