Advantech vulnerabilities
202 CVEs and advisories name Advantech as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-34263Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus
- CVE-2025-34266Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus
- CVE-2025-34264Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}
- CVE-2025-34262Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}
- CVE-2025-34258Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan
- CVE-2025-34259Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building
- CVE-2025-34261Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/
- CVE-2025-34260Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule
- CVE-2025-34257Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined
- CVE-2025-13373Advantech iView SQL Injection
- CVE-2025-58423Advantech DeviceOn/iEdge Path Traversal
- CVE-2025-59171Advantech DeviceOn/iEdge Path Traversal
- CVE-2025-62630Advantech DeviceOn/iEdge Path Traversal
- CVE-2025-64302Advantech DeviceOn/iEdge Cross-site Scripting
- CVE-2022-50595Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE
- CVE-2022-50591Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure
- CVE-2022-50593Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCE
- CVE-2022-50592Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE
- CVE-2022-50594Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure
- CVE-2025-34247Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction()
- CVE-2025-34246Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction()
- CVE-2025-34245Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction()
- CVE-2025-34244Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction()
- CVE-2025-34243Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()
- CVE-2025-34242Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()
- CVE-2025-34241Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction()
- CVE-2025-34240Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction()
- CVE-2025-34239Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction()
- CVE-2025-34238Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction()
- CVE-2025-34237Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()