Skip to content

Known vulnerabilities in ABB ASPECT-Enterprise

Is your version affected?

CVE Summary Score Published
CVE-2024-48839 Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise… 10.0 Critical Dec 5, 2024
CVE-2024-11317 Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an… 10.0 Critical Dec 5, 2024
CVE-2024-11316 Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected… 7.5 High Dec 5, 2024
CVE-2024-6784 Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and… 8.7 High Dec 5, 2024
CVE-2024-6516 Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a… 9.3 Critical Dec 5, 2024
CVE-2024-6515 Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher… 8.7 High Dec 5, 2024
CVE-2024-6209 Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series … 9.4 Critical Jul 5, 2024
CVE-2024-6298 Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series … 9.4 Critical Jul 5, 2024

Other ABB products