Bentley Systems vulnerabilities
3 vulnerabilities
Known vulnerabilities in Bentley Systems products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Microstation Connect2 vulnerabilities
- Itwin Platform1 vulnerabilities
HighCVE-2022-40201bentley systems · microstation connect +1 morebentley systems microstation connectBentley Systems MicroStation Connect versions
10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code.EPSS0.35%HighCVE-2022-41613bentley systems · microstation connect +1 morebentley systems microstation connectBentley Systems MicroStation Connect versions
10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose sensitive information, or execute arbitrary code.EPSS0.24%MediumCVE-2026-35383bentley systems · itwin platformBentley Systems iTwin Platform exposed access tokenAn unauthenticated attacker could use this token to enumerate or delete certain assets. As of 2026-03-27, the token is no longer present in the web pages and cannot be used to enumerate or delete assets.EPSS0.48%