Skip to content
OpenAdvisories

Vendor

Tridium

12 known vulnerabilities.

Tridium at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 2025100
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Niagara Framework 11 Niagara Enterprise Security 11 Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4 1 Niagara AX 0 Niagara AX Framework software products 0 NiagaraAX 0 Niagara 4.4u2 0 Niagara Enterprise Security 2.3u1 0 Niagara AX 3.8u4 0 Niagara 4.6 0 Niagara 4 Framework 0 Niagara AX Framework 0 Niagara 0

Latest advisories

  • Medium
    ICSA-12-228-01A 1 CVE rev. 2

    Tridium Niagara Vulnerabilities

    Tridium
    first May 19, 2012
  • High
    ICSA-13-045-01 1 CVE rev. 2

    Tridium NiagaraAX Directory Traversal Vulnerability

    Tridium
    first Nov 18, 2013
  • Medium
    ICSA-20-224-03 1 CVE

    Tridium Niagara

    Successful exploitation of this vulnerability could result in a denial-of-service condition.

    Tridium
  • High max 7.8
    ICSA-19-262-01 2 CVEs

    Tridium Niagara

    Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.

    Tridium
  • Medium
    ICSA-18-333-02 1 CVE rev. 2

    ICSA-18-333-02_Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4

    Daniel Santos and Elisa Costante of SecurityMatters reported the vulnerability to Tridium.

    Tridium
    first Nov 29, 2018
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 5.2
    CVE-2026-11804

    Program Module Vulnerability

    Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14…

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.2
    CVE-2025-3945

    Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, be…

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.2
    CVE-2025-3944

    Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; N…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 4.1
    CVE-2025-3943 EPSS 11%

    Use of GET Request Method With sensitive Query Strings

    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 4.3
    CVE-2025-3942

    Improper Output Neutralization for Logs

    Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.4
    CVE-2025-3941

    Improper Handling of Windows: DATA Alternate Data Stream

    Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1,…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 5.3
    CVE-2025-3940

    Improper Use of Validation Framework

    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.3
    CVE-2025-3939

    Observable Response Discrepancy

    Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 6.8
    CVE-2025-3938

    Missing Cryptographic Step

    Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; …

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.7
    CVE-2025-3937

    Use of Password Hash with Insufficient Computational Effort

    Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 6.5
    CVE-2025-3936

    Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Fra…

    Tridium Niagara Framework Niagara Enterprise Security
  • Unscored —
    CVE-2018-18985

    Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8…

    Tridium Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4