Tridium Niagara Enterprise Security vulnerabilities

13 vulnerabilities

Known vulnerabilities in Tridium Niagara Enterprise Security, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4MediumCVE-2018-18985tridium · niagara +2 moretridium niagaraTridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.EPSS0.97%9.8CriticalCVE-2025-3936tridium · niagara +2 moreIncorrect Permission Assignment for Critical ResourceThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.37%9.8CriticalCVE-2025-3937tridium · niagara +2 moreUse of Password Hash with Insufficient Computational EffortThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.34%7.5HighCVE-2025-3943tridium · niagara +2 moreUse of GET Request Method With sensitive Query StringsThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS10.16%9.8CriticalCVE-2025-3944tridium · niagara +2 moreIncorrect Permission Assignment for Critical ResourceThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.50%5.3MediumCVE-2025-3939tridium · niagara +2 moreObservable Response DiscrepancyThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.33%7.5HighCVE-2025-3942tridium · niagara +2 moreImproper Output Neutralization for LogsThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.31%9.8CriticalCVE-2025-3945tridium · niagara +2 moreImproper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.62%9.8CriticalCVE-2025-3938tridium · niagara +2 moreMissing Cryptographic StepThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.33%9.8CriticalCVE-2025-3940tridium · niagara +2 moreImproper Use of Validation FrameworkThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.37%9.8CriticalCVE-2025-3941tridium · niagara +2 moreImproper Handling of Windows: DATA Alternate Data StreamThis issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.EPSS0.50%4.3MediumCVE-2020-14483tridium · niagara +1 moretridium niagaraA timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.EPSS0.42%5.2MediumCVE-2026-11804tridium · niagara_enterprise_security +1 moreProgram Module VulnerabilityImproper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.EPSS0.24%