Vulnerabilities in Tridium
12 resultsVexday analysis
Tridium registra 12 vulnerabilidades no histórico com baixa pressão atual: nenhuma sob exploração ativa e apenas 1 publicada nos últimos 90 dias. A fraqueza dominante (CWE-732 - Permissões Incorretas) sugere riscos de controle de acesso em vez de vulnerabilidades críticas de execução remota, indicando um perfil de risco moderado e estável.
CVE-2025-3943MEDIUMUse of GET Request Method With sensitive Query StringsEPSS 7.6%CVE-2018-18985—Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2EPSS 1.0%CVE-2025-3945HIGHImproper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)EPSS 0.6%CVE-2025-3944HIGHIncorrect Permission Assignment for Critical ResourceEPSS 0.5%CVE-2025-3941MEDIUMImproper Handling of Windows: DATA Alternate Data StreamEPSS 0.5%CVE-2025-3936MEDIUMIncorrect Permission Assignment for Critical ResourceEPSS 0.4%CVE-2025-3938MEDIUMMissing Cryptographic StepEPSS 0.3%CVE-2025-3937HIGHUse of Password Hash with Insufficient Computational EffortEPSS 0.3%CVE-2025-3940MEDIUMImproper Use of Validation FrameworkEPSS 0.3%CVE-2025-3939MEDIUMObservable Response DiscrepancyEPSS 0.3%CVE-2025-3942MEDIUMImproper Output Neutralization for LogsEPSS 0.2%CVE-2026-11804MEDIUMProgram Module VulnerabilityEPSS 0.1%