# cve.now: Schweitzer Engineering Laboratories

The newest entries naming Schweitzer Engineering Laboratories as an affected vendor (up to 200), of 63 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-48018](https://cve.now/CVE-2025-48018.md): Deserialization of Untrusted Data (CVSS 7.5)
- [CVE-2025-48017](https://cve.now/CVE-2025-48017.md): Improper Limitation of a Pathname to a Restricted Directory (CVSS 9.0)
- [CVE-2025-48016](https://cve.now/CVE-2025-48016.md): Improper Control of Interaction Frequency (CVSS 4.3)
- [CVE-2025-48015](https://cve.now/CVE-2025-48015.md): Observable Response Discrepancy (CVSS 3.7)
- [CVE-2025-48014](https://cve.now/CVE-2025-48014.md): Improper Restriction of Excessive Authentication Attempts (CVSS 7.5)
- [CVE-2025-46743](https://cve.now/CVE-2025-46743.md): Cross-Site Request Forgery (CVSS 6.3)
- [CVE-2025-46750](https://cve.now/CVE-2025-46750.md): Authentication Bypass (CVSS 4.4)
- [CVE-2025-46749](https://cve.now/CVE-2025-46749.md): Improper Neutralization of Input (CVSS 4.3)
- [CVE-2025-46748](https://cve.now/CVE-2025-46748.md): Unverified Password Change (CVSS 2.7)
- [CVE-2025-46747](https://cve.now/CVE-2025-46747.md): Exposure of Sensitive System Information (CVSS 5.7)
- [CVE-2025-46746](https://cve.now/CVE-2025-46746.md): Error Message Contains Sensitive Information (CVSS 5.8)
- [CVE-2025-46745](https://cve.now/CVE-2025-46745.md): Improper Privilege Management (CVSS 6.5)
- [CVE-2025-46744](https://cve.now/CVE-2025-46744.md): Improper Privilege Management (CVSS 2.7)
- [CVE-2025-46742](https://cve.now/CVE-2025-46742.md): Improper Access Control (CVSS 4.3)
- [CVE-2025-46741](https://cve.now/CVE-2025-46741.md): Improper Privilege Management (CVSS 5.7)
- [CVE-2025-46740](https://cve.now/CVE-2025-46740.md): Improper Handling of Insufficient Permissions (CVSS 7.5)
- [CVE-2025-46739](https://cve.now/CVE-2025-46739.md): Improper Restriction of Excessive Authentication Attempts (CVSS 8.1)
- [CVE-2025-46738](https://cve.now/CVE-2025-46738.md): Deserialization of Untrusted Data (CVSS 6.6)
- [CVE-2025-46737](https://cve.now/CVE-2025-46737.md): Origin Validation Error (CVSS 7.4)
- [CVE-2024-2103](https://cve.now/CVE-2024-2103.md): Inclusion of Undocumented Features (CVSS 6.5)
- [CVE-2023-2267](https://cve.now/CVE-2023-2267.md): Improper input validation could lead to reflection injection attacks (CVSS 4.3)
- [CVE-2023-2266](https://cve.now/CVE-2023-2266.md): Improper neutralization of input during web page generation could lead to cross-site scripting based attacks (CVSS 4.3)
- [CVE-2023-2265](https://cve.now/CVE-2023-2265.md): Improper restriction of rendered UI layers or frames could lead to clickjacking attack (CVSS 4.3)
- [CVE-2023-2264](https://cve.now/CVE-2023-2264.md): Improper input validition could lead to code injection (CVSS 4.0)
- [CVE-2023-34390](https://cve.now/CVE-2023-34390.md): Improper input validation could lead to denial of service (CVSS 4.5)
- [CVE-2023-34389](https://cve.now/CVE-2023-34389.md): Allocation of resources without limits could lead to denial of service (CVSS 4.5)
- [CVE-2023-34388](https://cve.now/CVE-2023-34388.md): Improper authentication could lead to session hijacking (CVSS 6.5)
- [CVE-2023-31177](https://cve.now/CVE-2023-31177.md): Improper neutralizataion of input could lead to execution of arbitrary code (CVSS 4.3)
- [CVE-2023-31176](https://cve.now/CVE-2023-31176.md): Insufficient entropy vulnerability could lead to authentication bypass (CVSS 7.5)
- [CVE-2023-34392](https://cve.now/CVE-2023-34392.md): Missing Authentication for Critical Function (CVSS 8.2)
- [CVE-2023-34391](https://cve.now/CVE-2023-34391.md): Insecure Inherited Permissions (CVSS 7.4)
- [CVE-2023-31175](https://cve.now/CVE-2023-31175.md): Execution with Unnecessary Privileges (CVSS 8.8)
- [CVE-2023-31174](https://cve.now/CVE-2023-31174.md): Cross-Site Request Forgery (CSRF) (CVSS 7.4)
- [CVE-2023-31173](https://cve.now/CVE-2023-31173.md): Use of Hard-coded Credentials (CVSS 7.7)
- [CVE-2023-31172](https://cve.now/CVE-2023-31172.md): Incomplete Filtering of Special Elements (CVSS 5.9)
- [CVE-2023-31171](https://cve.now/CVE-2023-31171.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 5.9)
- [CVE-2023-31170](https://cve.now/CVE-2023-31170.md): Inclusion of Functionality from Untrusted Control Sphere (CVSS 5.9)
- [CVE-2023-31169](https://cve.now/CVE-2023-31169.md): Improper Handling of Unicode Encoding (CVSS 4.8)
- [CVE-2023-31168](https://cve.now/CVE-2023-31168.md): Inclusion of Functionality from Untrusted Control Sphere (CVSS 5.5)
- [CVE-2023-31167](https://cve.now/CVE-2023-31167.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 5.0)
- [CVE-2023-31166](https://cve.now/CVE-2023-31166.md): Improper Limitation of a Pathname to a Restricted Directory (CVSS 4.1)
- [CVE-2023-31165](https://cve.now/CVE-2023-31165.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31164](https://cve.now/CVE-2023-31164.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31163](https://cve.now/CVE-2023-31163.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31162](https://cve.now/CVE-2023-31162.md): Improper Input Validation in Web Interface (CVSS 4.8)
- [CVE-2023-31161](https://cve.now/CVE-2023-31161.md): Improper Input Validation in Web Interface (CVSS 5.9)
- [CVE-2023-31160](https://cve.now/CVE-2023-31160.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31159](https://cve.now/CVE-2023-31159.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31158](https://cve.now/CVE-2023-31158.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31157](https://cve.now/CVE-2023-31157.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31156](https://cve.now/CVE-2023-31156.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31155](https://cve.now/CVE-2023-31155.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31154](https://cve.now/CVE-2023-31154.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31153](https://cve.now/CVE-2023-31153.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3)
- [CVE-2023-31152](https://cve.now/CVE-2023-31152.md): Authentication Bypass Using an Alternate Path or Channel (CVSS 4.0)
- [CVE-2023-31151](https://cve.now/CVE-2023-31151.md): Improper Certificate Validation (CVSS 4.7)
- [CVE-2023-31150](https://cve.now/CVE-2023-31150.md): Storing Passwords in a Recoverable Format (CVSS 8.0)
- [CVE-2023-31149](https://cve.now/CVE-2023-31149.md): Improper Input Validation in Web Interface (CVSS 9.1)
- [CVE-2023-31148](https://cve.now/CVE-2023-31148.md): Improper Input Validation in Web Interface (CVSS 9.1)
- [CVE-2023-2310](https://cve.now/CVE-2023-2310.md): Channel Accessible by Non-Endpoint (CVSS 6.8)
- [CVE-2018-10608](https://cve.now/CVE-2018-10608.md): SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP (no CVSS)
- [CVE-2018-10604](https://cve.now/CVE-2018-10604.md): SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting (no CVSS)
- [CVE-2018-10600](https://cve.now/CVE-2018-10600.md): SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/schweitzer-engineering-laboratories
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.