Skip to content
OpenAdvisories

Product · Advantech

iView

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2025-13373

    Advantech iView SQL Injection

    Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.

    Advantech iView
  • High 8.8
    CVE-2022-50591

    Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure

    Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_config_id’ parameter to the ‘…

    Advantech iView
  • High 8.8
    CVE-2022-50594

    Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure

    Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘data’ parameter to the ‘NetworkSe…

    Advantech iView
  • High 8.8
    CVE-2025-53515

    Advantech iView SQL Injection

    A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not sanitiz…

    Advantech iView
  • High 8.8
    CVE-2025-52577

    Advantech iView SQL Injection

    A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not p…

    Advantech iView
  • High 8.8
    CVE-2025-53475

    Advantech iView SQL Injection

    A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). This issue requires an authenticated attacker with at least user-level privileges. Certain parameters in this func…

    Advantech iView
  • High 7.6
    CVE-2025-48891

    Advantech iView SQL Injection

    A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to informat…

    Advantech iView
  • High 7.5
    CVE-2023-52335

    Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability

    Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this …

    Advantech iView