Skip to content
OpenAdvisories

Product · Pilz

PASvisu

3 known vulnerabilities.

PASvisu at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 2 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202620
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 7.5

    Pilz: Vulnerability affecting PASvisu Runtime

    The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by malicious web requests.

  • High max 7.5

    Pilz: Vulnerability affecting PASvisu Runtime

    The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.

  • High max 8.8
    VDE-2023-048 1 CVE 1 exploited rev. 2

    Pilz: Multiple products prone to libwebp vulnerability

    Several Pilz products use the 3rd-party component 'libwebp' for decoding of images in WebP format. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software product. Depending on the …

    first Dec 5, 2023
  • Critical max 8.2
    VDE-2020-033 6 CVEs rev. 3

    Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities

    A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operat…

    first Sep 10, 2020
  • High max 8.1
    VDE-2023-050 2 CVEs rev. 4

    Pilz: Vulnerability in PASvisu and PMI v8xx

    Multiple Pilz products are affected by stored cross-site-scripting (XSS) vulnerabilities. The vulnerabilities may enable an attacker to gain full control over the system. Update: 27.02.2024 Fix typo in advisory title

    first Jan 30, 2024

3 results · Feed

  • High 7.8

    Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx

    A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

  • High 8.1

    XSS vulnerability in Pilz PASvisu and PMI v8xx

    A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity…

  • High 7.5

    PILZ: PASvisu and PMI affected by ZipSlip

    A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or…