Skip to content
OpenAdvisories

Vendor

arcinfo

14 known vulnerabilities.

Products

PcVue 14
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-1696

    Missing security HTTP headers

    Some HTTP security headers are not properly set by the web server when sending responses to the client application.

    arcinfo PcVue
  • Low 2.3
    CVE-2026-1694

    Server configuration details in HTTP headers

    HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnec…

    arcinfo PcVue
  • Low 1.8
    CVE-2024-12057

    User credentials recorded in log files

    User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the cred…

    arcinfo PcVue
  • Low 2.3
    CVE-2024-12056

    Client Secret not checked with OAuth Password grant type

    The Client secret is not checked when using the OAuth Password grant type. By exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment. Exploitation requires …

    arcinfo PcVue