Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:webaccess\/nms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductWebaccess/Nms (2b648c46-9d95-5667-b4da-8faabd986d39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32951 vulnerable 2026-06-08 05:32:08.250301 Advantech WebAccess/NMS Improper Authentication
MEDIUM (5.3)
WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS.
Published: 2021-10-27T00:54:22.837Z
Updated: 2024-09-16T20:48:04.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10631 vulnerable 2026-06-08 05:16:35.416686 Details available
An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
Published: 2020-04-09T13:08:55.000Z
Updated: 2024-08-04T11:06:10.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10629 vulnerable 2026-06-08 05:16:35.412355 Details available
WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.
Published: 2020-04-09T13:12:17.000Z
Updated: 2024-08-04T11:06:10.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10625 vulnerable 2026-06-08 05:16:35.403686 Details available
WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.
Published: 2020-04-09T13:06:59.000Z
Updated: 2024-08-04T11:06:10.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10623 vulnerable 2026-06-08 05:16:35.394241 Details available
Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
Published: 2020-04-09T13:03:30.000Z
Updated: 2024-08-04T11:06:10.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10621 vulnerable 2026-06-08 05:16:35.393674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10619 vulnerable 2026-06-08 05:16:35.393066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10617 vulnerable 2026-06-08 05:16:35.390224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10603 vulnerable 2026-06-08 05:16:35.356047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8845 vulnerable 2026-06-08 05:12:06.552037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8841 vulnerable 2026-06-08 05:12:06.546936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7505 vulnerable 2026-06-08 05:12:03.778648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7503 vulnerable 2026-06-08 05:12:03.777708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7501 vulnerable 2026-06-08 05:12:03.773517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7499 vulnerable 2026-06-08 05:12:03.768607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7497 vulnerable 2026-06-08 05:12:03.765166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7495 vulnerable 2026-06-08 05:12:03.762677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10591 vulnerable 2026-06-08 05:10:26.843848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10590 vulnerable 2026-06-08 05:10:26.843294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10589 vulnerable 2026-06-08 05:10:26.842557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.