Vulnerabilities > Advantech > Iview > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-31 CVE-2023-3983 SQL Injection vulnerability in Advantech Iview
An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752.
network
low complexity
advantech CWE-89
8.8
2022-09-27 CVE-2022-3323 SQL Injection vulnerability in Advantech Iview 5.7.04.6469
An SQL injection vulnerability in Advantech iView 5.7.04.6469.
network
low complexity
advantech CWE-89
7.5
2022-07-22 CVE-2022-2135 SQL Injection vulnerability in Advantech Iview
The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.
network
low complexity
advantech CWE-89
7.5
2022-07-22 CVE-2022-2138 Missing Authentication for Critical Function vulnerability in Advantech Iview
The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
network
low complexity
advantech CWE-306
7.5
2021-06-11 CVE-2021-32932 SQL Injection vulnerability in Advantech Iview
The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versions prior to v5.7.03.6182).
network
low complexity
advantech CWE-89
7.5
2021-02-11 CVE-2021-22656 Path Traversal vulnerability in Advantech Iview 5.6/5.7/5.7.02
Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files.
network
low complexity
advantech CWE-22
7.5
2021-02-11 CVE-2021-22654 SQL Injection vulnerability in Advantech Iview 5.6/5.7/5.7.02
Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information.
network
low complexity
advantech CWE-89
7.5
2020-07-15 CVE-2020-14499 Unspecified vulnerability in Advantech Iview 5.6
Advantech iView, versions 5.6 and prior, has an improper access control vulnerability.
network
low complexity
advantech
7.5