SQL Injection

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Advantech WISE-IoTSuite/SaaS - SQL InjectionCVE-2025-52694Advantech · CVSS 10 · 40% likely

   CWE-89

2. An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An una…CVE-2022-3323Advantech · CVSS 7.5 · 29% likely

   CWE-89

3. An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.uti…CVE-2023-3983Advantech · 17% likely

   CWE-89

4. Advantech WebAccess SQL InjectionCVE-2014-0763Advantech · CVSS 7.5 · 16% likely

   CWE-89

5. Advantech iView SQL InjectionCVE-2025-53475Advantech · CVSS 8.8 · 7.6% likely

   CWE-89

6. In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…CVE-2018-7501Advantech · 1.6% likely

   CWE-89

7. Advantech iView ConfigurationServlet SQL Injection Information Disclosure VulnerabilityCVE-2023-52335Advantech · CVSS 7.5 · 1.3% likely

   CWE-89

8. Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCECVE-2022-50593Advantech · CVSS 9.3 · 0.7% likely

   CWE-89

9. Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCECVE-2022-50595Advantech · CVSS 9.3 · 0.7% likely

   CWE-89

10. Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCECVE-2022-50592Advantech · CVSS 9.3 · 0.7% likely

    CWE-89

11. Advantech iView SQL InjectionCVE-2025-53515Advantech · CVSS 8.8 · 0.6% likely

    CWE-89

12. Advantech iView SQL InjectionCVE-2025-52577Advantech · CVSS 8.8 · 0.6% likely

    CWE-89

13. Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information DisclosureCVE-2022-50591Advantech · CVSS 8.8 · 0.5% likely

    CWE-89

14. Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information DisclosureCVE-2022-50594Advantech · CVSS 8.8 · 0.5% likely

    CWE-89

15. Advantech iView SQL InjectionCVE-2025-13373Advantech · CVSS 7.5 · 0.5% likely

    CWE-89

16. SQL Injection VulnerabilityCVE-2026-6888Advantech · CVSS 7.2 · 0.4% likely

    CWE-89

17. Advantech WebAccess/SCADA SQL InjectionCVE-2025-46268Advantech · CVSS 6.3 · 0.3% likely

    CWE-89

18. Advantech iView SQL InjectionCVE-2025-48891Advantech · CVSS 7.6 · 0.3% likely

    CWE-89

19. Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction()CVE-2025-34247Advantech · CVSS 5.1 · 0.3% likely

    CWE-89

20. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction()CVE-2025-34246Advantech · CVSS 5.3 · 0.3% likely

    CWE-89

21. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction()CVE-2025-34245Advantech · CVSS 5.3 · 0.3% likely

    CWE-89

22. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction()CVE-2025-34244Advantech · CVSS 5.3 · 0.3% likely

    CWE-89

23. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()CVE-2025-34243Advantech · CVSS 5.3 · 0.3% likely

    CWE-89

24. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()CVE-2025-34242Advantech · CVSS 8.6 · 0.3% likely

    CWE-89

25. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction()CVE-2025-34241Advantech · CVSS 5.3 · 0.3% likely

    CWE-89

26. Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction()CVE-2025-34240Advantech · CVSS 8.6 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.