Skip to content
OpenAdvisories

Vendor

Altium

22 known vulnerabilities.

Products

Altium Enterprise Server 12 Altium 365 7 AES 3 Altium Live 3 Altium Designer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-27379

    Stored Cross-Site Scripting in AES BOM Viewer

    A stored cross-site scripting (XSS) vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected conte…

    Altium AES
  • Medium 5.3
    CVE-2025-27377

    Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

    Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle (MITM) attack could exploit this issue to intercept or manipulate network traffic, potentially exposi…

    Altium Altium Designer
  • Medium 6.1
    CVE-2026-1011

    Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint

    A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization. Although the client interface applies HTML escaping, the backend accepts and stores arbitrary HTML and Jav…

    Altium Altium Live