Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Niagara CRITICAL 9.8
CVE-2025-3941

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security …

Mitigation only
Fix from $2,300 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3944

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX a…

Mitigation only
Fix from $2,300 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3945

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara…

Mitigation only
Fix from $2,300 2025-05-22
Niagara HIGH 7.5
CVE-2025-3942

Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Win…

Mitigation only
Fix from $1,950 2025-05-22
Niagara HIGH 7.5
CVE-2025-3943EPSS 8%

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise …

Mitigation only
Fix from $1,950 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3936

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on W…

Mitigation only
Fix from $2,300 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3937

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterp…

Mitigation only
Fix from $2,300 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3938

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, …

Mitigation only
Fix from $2,300 2025-05-22
Niagara CRITICAL 9.8
CVE-2025-3940

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Window…

Mitigation only
Fix from $2,300 2025-05-22
Niagara MEDIUM 5.3
CVE-2025-3939

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Li…

Mitigation only
Fix from $1,600 2025-05-22
Niagara MEDIUM 5.4
CVE-2018-18985

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all ver…

Fix: 2.3.118.6 / 3.8.401.1+
Fix from $1,600 2019-01-29
Niagara CRITICAL 9.8
CVE-2017-16748EPSS 5%

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using…

Fix: after 4.4
Fix from $2,300 2018-08-20
Niagara HIGH 7.2
CVE-2017-16744EPSS 6%

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windo…

Fix: after 4.4
Fix from $1,950 2018-08-20
Niagara Ax HIGH 9.3
CVE-2012-4701EPSS 6%

Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute a…

Mitigation only
Fix from $1,950 2013-02-15
Niagara Ax MEDIUM 5.0
CVE-2012-3024

Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authe…

Fix: after 3.6
Fix from $1,600 2012-08-16
Niagara Ax MEDIUM 5.0
CVE-2012-3025

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, whic…

Fix: after 3.6
Fix from $1,600 2012-08-16
Niagara Ax HIGH 7.8
CVE-2012-4028

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions…

Mitigation only
Fix from $1,950 2012-07-16
Niagara Ax MEDIUM 5.0
CVE-2012-4027

Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px f…

Mitigation only
Fix from $1,600 2012-07-16