Skip to content

Tridium vulnerabilities

Products

Newest

tridium niagara enterprise security, niagara framework +1 more Program Module Vulnerability CVE-2026-11804 5.2 MediumJuly 23, 2026
tridium niagara, niagara enterprise security, niagara framework +2 more Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) CVE-2025-3945 7.2 HighMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Incorrect Permission Assignment for Critical Resource CVE-2025-3944 7.2 HighMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Use of GET Request Method With sensitive Query Strings CVE-2025-3943 EPSS 11.4% 4.1 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Improper Output Neutralization for Logs CVE-2025-3942 4.3 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Improper Handling of Windows: DATA Alternate Data Stream CVE-2025-3941 5.4 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Improper Use of Validation Framework CVE-2025-3940 5.3 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Observable Response Discrepancy CVE-2025-3939 5.3 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Missing Cryptographic Step CVE-2025-3938 6.8 MediumMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Use of Password Hash with Insufficient Computational Effort CVE-2025-3937 7.7 HighMay 22, 2025
tridium niagara, niagara enterprise security, niagara framework +2 more Incorrect Permission Assignment for Critical Resource CVE-2025-3936 6.5 MediumMay 22, 2025
honeywell niagara framework Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5 CVE-2024-1309 6.5 MediumFebruary 13, 2024
tridium niagara, niagara enterprise security +1 more A timeout during a TLS handshake can result in the connection failing to terminate. This can... CVE-2020-14483 4.3 MediumAugust 13, 2020
tridium niagara, niagara ax, niagara4 +2 more A specific utility may allow an attacker to gain read access to privileged files in the Niagara... CVE-2019-13528 4.4 MediumSeptember 24, 2019
tridium niagara, niagara enterprise security, niagara enterprise security 2.3u1, all versions prior to 2.3.118.6, niagara ax 3.8u4, all versions prior to 3.8.401.1, niagara 4.4u2, all versions prior to 4.4.93.40.2, and niagara 4.6, all versions prior to 4.6.96.28.4 +1 more +3 more Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all... CVE-2018-18985 5.4 MediumJanuary 29, 2019
tridium niagara, niagara ax framework, ics-cert niagara ax framework and niagara 4 framework +2 more An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior... CVE-2017-16748 9.8 CriticalAugust 20, 2018
tridium niagara, ics-cert niagara ax framework and niagara 4 framework, tridium niagara ax framework +2 more A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems... CVE-2017-16744 Public exploit 7.2 HighAugust 20, 2018
tridium niagara ax Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers... CVE-2012-4701 9.3 HighFebruary 15, 2013
tridium niagara ax The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64... CVE-2012-3025 5.0 MediumAugust 16, 2012
tridium niagara ax Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys... CVE-2012-3024 5.0 MediumAugust 16, 2012
tridium niagara ax Tridium Niagara AX Framework does not properly store credential data, which allows context... CVE-2012-4028 7.8 HighJuly 16, 2012
tridium niagara ax Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read... CVE-2012-4027 5.0 MediumJuly 16, 2012