8.6
High
CVE-2025-14376 A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext…
Description
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Verve Asset Manager | Versions not published |
Other CVEs of Verve Asset Manager
The 4 CVEs of Verve Asset Manager →
CVE-2025-14377
A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext…
8.8
High
CVE-2025-11862
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and…
8.4
High
CVE-2025-1449
A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing
7.5
High