Skip to content
OpenAdvisories

Vendor

Valmet

4 known vulnerabilities.

Valmet at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202530
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Valmet DNA 3 Valmet DNA Web Tools 1 DNA Engineering Web Tools 0 DNA 0

Latest advisories

  • High max 8.7
    ICSA-26-050-02 1 CVE

    Valmet DNA Engineering Web Tools

    Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.

    Valmet
  • High max 8.8
    ICSA-22-102-01 1 CVE

    Valmet DNA

    Successful exploitation of this vulnerability could allow an attacker to execute commands remotely with system privileges.

    Valmet
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.7
    CVE-2025-15577

    Valmet DNA Web server arbitrary file read access

    An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.

    Valmet Valmet DNA Web Tools
  • High 8.9
    CVE-2025-0416

    Valmet DNA Local privilege escalation through insecure DCOM configuration

    Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePr…

    Valmet Valmet DNA
  • High 7.0
    CVE-2025-0417

    Valmet DNA Lack of protection against brute force attacks

    Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing swi…

    Valmet Valmet DNA
  • Medium 5.2
    CVE-2025-0418

    Valmet DNA user passwords in plain text

    Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords.

    Valmet Valmet DNA