Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Iview (f0610ca1-bf61-509d-b5cf-0da264e1d26f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53519 |
vulnerable | 2026-06-08 07:31:14.655575 |
Advantech iView Cross-site Scripting
MEDIUM (5.4)
A vulnerability exists in Advantech iView versions prior to 5.7.05 build
7057, which could allow a reflected cross-site scripting (XSS) attack.
By manipulating specific parameters, an attacker could execute
unauthorized scripts in the user's browser, potentially leading to
information disclosure or other malicious activities.
Published: 2025-07-10T23:14:37.185Z
Updated: 2025-07-11T17:50:07.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53515 |
vulnerable | 2026-06-08 07:31:14.651519 |
Advantech iView SQL Injection
HIGH (8.8)
A vulnerability exists in Advantech iView that allows for SQL injection
and remote code execution through NetworkServlet.archiveTrap(). This
issue requires an authenticated attacker with at least user-level
privileges. Certain input parameters are not sanitized, allowing an
attacker to perform SQL injection and potentially execute code in the
context of the 'nt authority\local service' account.
Published: 2025-07-10T23:25:51.561Z
Updated: 2025-07-11T13:57:41.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53509 |
vulnerable | 2026-06-08 07:31:14.646034 |
Advantech iView Argument Injection
MEDIUM (6.5)
A vulnerability exists in Advantech iView that allows for argument
injection in the NetworkServlet.restoreDatabase(). This issue requires
an authenticated attacker with at least user-level privileges. An input
parameter can be used directly in a command without proper sanitization,
allowing arbitrary arguments to be injected. This can result in
information disclosure, including sensitive database credentials.
Published: 2025-07-10T23:29:10.103Z
Updated: 2025-07-11T13:29:37.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53475 |
vulnerable | 2026-06-08 07:31:14.588892 |
Advantech iView SQL Injection
HIGH (8.8)
A vulnerability exists in Advantech iView that could allow for SQL
injection and remote code execution through
NetworkServlet.getNextTrapPage(). This issue requires an authenticated
attacker with at least user-level privileges. Certain parameters in this
function are not properly sanitized, allowing an attacker to perform
SQL injection and potentially execute code in the context of the 'nt
authority\local service' account.
Published: 2025-07-10T23:23:38.421Z
Updated: 2025-07-11T13:39:39.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53397 |
vulnerable | 2026-06-08 07:31:14.474726 |
Advantech iView Cross-site Scripting
MEDIUM (5.4)
A vulnerability exists in Advantech iView versions prior to 5.7.05 build
7057, which could allow a reflected cross-site scripting (XSS) attack.
By exploiting this flaw, an attacker could execute unauthorized scripts
in the user's browser, potentially leading to information disclosure or
other malicious activities.
Published: 2025-07-10T23:13:27.593Z
Updated: 2025-07-11T13:58:21.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52577 |
vulnerable | 2026-06-08 07:31:11.867699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52459 |
vulnerable | 2026-06-08 07:31:11.635054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48891 |
vulnerable | 2026-06-08 07:29:12.186123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46704 |
vulnerable | 2026-06-08 07:27:08.626401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41442 |
vulnerable | 2026-06-08 07:25:07.069662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13373 |
vulnerable | 2026-06-08 07:04:32.074010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52335 |
vulnerable | 2026-06-08 06:17:54.820643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3983 |
vulnerable | 2026-06-08 06:09:40.964136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50595 |
vulnerable | 2026-06-08 05:52:03.397504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50594 |
vulnerable | 2026-06-08 05:52:03.397146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50593 |
vulnerable | 2026-06-08 05:52:03.396697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50592 |
vulnerable | 2026-06-08 05:52:03.396231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50591 |
vulnerable | 2026-06-08 05:52:03.395773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2143 |
vulnerable | 2026-06-08 05:42:50.342824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2142 |
vulnerable | 2026-06-08 05:42:50.342361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2139 |
vulnerable | 2026-06-08 05:42:50.340961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2138 |
vulnerable | 2026-06-08 05:42:50.340426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2137 |
vulnerable | 2026-06-08 05:42:50.339987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2136 |
vulnerable | 2026-06-08 05:42:50.339535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2135 |
vulnerable | 2026-06-08 05:42:50.338983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32932 |
vulnerable | 2026-06-08 05:32:08.213804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32930 |
vulnerable | 2026-06-08 05:32:08.211136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22658 |
vulnerable | 2026-06-08 05:30:00.997768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22656 |
vulnerable | 2026-06-08 05:30:00.994687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22654 |
vulnerable | 2026-06-08 05:30:00.994005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22652 |
vulnerable | 2026-06-08 05:30:00.992902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16245 |
vulnerable | 2026-06-08 05:19:27.843934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14507 |
vulnerable | 2026-06-08 05:19:23.650904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14505 |
vulnerable | 2026-06-08 05:19:23.647815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14503 |
vulnerable | 2026-06-08 05:19:23.646537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14501 |
vulnerable | 2026-06-08 05:19:23.640403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14499 |
vulnerable | 2026-06-08 05:19:23.636444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14497 |
vulnerable | 2026-06-08 05:19:23.633190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.