Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-06-25	CVE-2016-4525	Unspecified vulnerability in Advantech Webaccess Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag. local low complexity advantech	6.6
2016-01-15	CVE-2015-3948	Cross-site Scripting vulnerability in Advantech Webaccess Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. network low complexity advantech CWE-79	5.4
2016-01-15	CVE-2015-3943	Information Exposure vulnerability in Advantech Webaccess Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors. network low complexity advantech CWE-200	5.3