Webaccess/Vpn
Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:webaccess\/vpn:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Webaccess/Vpn (9f42e7eb-c7c0-5a40-9ccd-9c2e6b50e66b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34247 |
vulnerable | 2026-06-08 07:19:02.834490 |
Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction()
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in NetworksController.addNetworkAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Published: 2025-11-06T19:49:37.330Z
Updated: 2025-11-17T19:38:11.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34246 |
vulnerable | 2026-06-08 07:19:02.834173 |
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction()
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Published: 2025-11-06T19:49:01.611Z
Updated: 2025-11-17T19:38:11.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34245 |
vulnerable | 2026-06-08 07:19:02.833833 |
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction()
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Published: 2025-11-06T19:48:21.189Z
Updated: 2025-11-17T19:38:11.183Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34244 |
vulnerable | 2026-06-08 07:19:02.833382 |
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction()
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxDeviceFwRulesAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Published: 2025-11-06T19:47:41.796Z
Updated: 2025-11-17T19:38:11.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34243 |
vulnerable | 2026-06-08 07:19:02.833042 |
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxNetworkFwRulesAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Published: 2025-11-06T19:47:04.733Z
Updated: 2025-11-17T19:38:10.859Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34242 |
vulnerable | 2026-06-08 07:19:02.832545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34241 |
vulnerable | 2026-06-08 07:19:02.832102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34240 |
vulnerable | 2026-06-08 07:19:02.831748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34239 |
vulnerable | 2026-06-08 07:19:02.831210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34238 |
vulnerable | 2026-06-08 07:19:02.830855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34237 |
vulnerable | 2026-06-08 07:19:02.830347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34236 |
vulnerable | 2026-06-08 07:19:02.829887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.