Skip to content
OpenAdvisories

Vendor

Tridium

12 known vulnerabilities.

Products

Niagara Framework 11 Niagara Enterprise Security 11 Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4 1 Niagara AX 0 Niagara AX Framework software products 0 NiagaraAX 0 Niagara 4.4u2 0 Niagara Enterprise Security 2.3u1 0 Niagara AX 3.8u4 0 Niagara 4.6 0 Niagara 4 Framework 0 Niagara AX Framework 0 Niagara 0
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.2
    CVE-2026-11804

    Program Module Vulnerability

    Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 4.1
    CVE-2025-3943 EPSS 11%

    Use of GET Request Method With sensitive Query Strings

    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 4.3
    CVE-2025-3942

    Improper Output Neutralization for Logs

    Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.4
    CVE-2025-3941

    Improper Handling of Windows: DATA Alternate Data Stream

    Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1,…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 5.3
    CVE-2025-3940

    Improper Use of Validation Framework

    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.3
    CVE-2025-3939

    Observable Response Discrepancy

    Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 6.8
    CVE-2025-3938

    Missing Cryptographic Step

    Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; …

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 6.5
    CVE-2025-3936

    Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Fra…

    Tridium Niagara Enterprise Security Niagara Framework