| CVE-2024-13955 |
2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if…
|
9.4
Critical
|
May 22, 2025 |
| CVE-2024-48853 |
An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a…
|
9.5
Critical
|
May 22, 2025 |
| CVE-2024-51547 |
Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue…
|
9.3
Critical
|
Feb 6, 2025 |
| CVE-2024-51555 |
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-51551 |
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-51550 |
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-51549 |
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products:…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-51545 |
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. …
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-48845 |
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-48840 |
Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-48839 |
Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-11317 |
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-6516 |
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-6209 |
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series …
|
9.4
Critical
|
Jul 5, 2024 |
| CVE-2024-6298 |
Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series …
|
9.4
Critical
|
Jul 5, 2024 |