Microchip Gridtime 3000 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Microchip Gridtime 3000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2026-12619microchipgridtime_3000_firmware
EPSS score
0.23%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.5.4CVE-2026-12621microchipgridtime_3000_firmware
EPSS score
0.23%
Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0.5.4CVE-2026-12622microchipgridtime_3000_firmware
EPSS score
0.21%
The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.6.5CVE-2026-12620microchipgridtime_3000_firmware
EPSS score
0.39%
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.