{"schema_version":1,"title":"Advantech Webaccess vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Advantech Webaccess: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-14849, was published on 18 December 2025.","url":"https://junglewise.ai/threats/technologies/webaccess","json_url":"https://junglewise.ai/threats/technologies/webaccess.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/webaccess","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":2,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":1},"latest":[{"cve":"CVE-2025-14849","cvss":8.8,"epss":0.0062,"slug":"cve-2025-14849-advantech-webaccess-scada-is-vulnerable-to-unrestricted-file","title":"Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.","severity":"high","exploited":false,"published_at":"2025-12-18T21:15:52.743+00:00","url":"https://junglewise.ai/threats/cve-2025-14849-advantech-webaccess-scada-is-vulnerable-to-unrestricted-file"},{"cve":"CVE-2025-34247","cvss":6.5,"epss":0.0032,"slug":"cve-2025-34247-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:49.017+00:00","url":"https://junglewise.ai/threats/cve-2025-34247-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34246","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34246-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.87+00:00","url":"https://junglewise.ai/threats/cve-2025-34246-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34245","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34245-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.717+00:00","url":"https://junglewise.ai/threats/cve-2025-34245-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34244","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34244-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.56+00:00","url":"https://junglewise.ai/threats/cve-2025-34244-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34243","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34243-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.41+00:00","url":"https://junglewise.ai/threats/cve-2025-34243-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34242","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34242-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.27+00:00","url":"https://junglewise.ai/threats/cve-2025-34242-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34241","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34241-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.1+00:00","url":"https://junglewise.ai/threats/cve-2025-34241-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34240","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34240-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:47.937+00:00","url":"https://junglewise.ai/threats/cve-2025-34240-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34239","cvss":7.2,"epss":0.017,"slug":"cve-2025-34239-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-command","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in…","severity":"high","exploited":false,"published_at":"2025-11-06T20:15:47.757+00:00","url":"https://junglewise.ai/threats/cve-2025-34239-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-command"},{"cve":"CVE-2025-34238","cvss":6.5,"epss":0.0041,"slug":"cve-2025-34238-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-an","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:47.587+00:00","url":"https://junglewise.ai/threats/cve-2025-34238-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-an"},{"cve":"CVE-2025-34237","cvss":5.4,"epss":0.0022,"slug":"cve-2025-34237-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-stored","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:47.363+00:00","url":"https://junglewise.ai/threats/cve-2025-34237-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-stored"},{"cve":"CVE-2025-34236","cvss":5.4,"epss":0.0022,"slug":"cve-2025-34236-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-stored","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:47.18+00:00","url":"https://junglewise.ai/threats/cve-2025-34236-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-stored"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Advantech ADAM-3600 EdgeLink","slug":"adam-3600-edgelink","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/adam-3600-edgelink"},{"name":"Advantech EKI-1242EIMS","slug":"eki-1242eims","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/eki-1242eims"},{"name":"Advantech Vpn","slug":"advantech-vpn","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/advantech-vpn"},{"name":"Advantech EKI-1242IEIMS","slug":"eki-1242ieims","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/eki-1242ieims"},{"name":"Advantech Wise-Deviceon Server","slug":"wise-deviceon-server","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/wise-deviceon-server"},{"name":"Advantech EdgeLink","slug":"edgelink","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/edgelink"},{"name":"Advantech Deviceon\\","slug":"deviceon","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/deviceon"},{"name":"Advantech Iedge","slug":"iedge","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/iedge"},{"name":"Advantech WISE-6610-CB","slug":"wise-6610-cb","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wise-6610-cb"},{"name":"Advantech WISE-6610-EB","slug":"wise-6610-eb","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wise-6610-eb"},{"name":"Advantech WISE-6610-EL-CB","slug":"wise-6610-el-cb","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wise-6610-el-cb"},{"name":"Advantech WISE-6610-EL-EB","slug":"wise-6610-el-eb","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wise-6610-el-eb"}],"technology":{"hub":true,"name":"Advantech Webaccess","slug":"webaccess","vendor":{"hub":true,"name":"Advantech","slug":"advantech","url":"https://junglewise.ai/threats/vendors/advantech"},"aliases":[],"homepage":"https://www.advantech.com/en/products/webaccess-hmi-scada-software/sub_80667084-7671-469b-962f-97997d93d6c8","repo_url":"https://www.advantech.com/en/products/webaccess-scada/sub_80650942-0694-4e30-9706-06979669666c","description":"WebAccess is a browser-based software package for human-machine interface and supervisory control and data acquisition.","url":"https://junglewise.ai/threats/technologies/webaccess"},"most_severe":[{"cve":"CVE-2025-14849","cvss":8.8,"epss":0.0062,"slug":"cve-2025-14849-advantech-webaccess-scada-is-vulnerable-to-unrestricted-file","title":"Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.","severity":"high","exploited":false,"published_at":"2025-12-18T21:15:52.743+00:00","url":"https://junglewise.ai/threats/cve-2025-14849-advantech-webaccess-scada-is-vulnerable-to-unrestricted-file"},{"cve":"CVE-2025-34239","cvss":7.2,"epss":0.017,"slug":"cve-2025-34239-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-command","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in…","severity":"high","exploited":false,"published_at":"2025-11-06T20:15:47.757+00:00","url":"https://junglewise.ai/threats/cve-2025-34239-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-command"},{"cve":"CVE-2025-34238","cvss":6.5,"epss":0.0041,"slug":"cve-2025-34238-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-an","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:47.587+00:00","url":"https://junglewise.ai/threats/cve-2025-34238-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-an"},{"cve":"CVE-2025-34247","cvss":6.5,"epss":0.0032,"slug":"cve-2025-34247-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:49.017+00:00","url":"https://junglewise.ai/threats/cve-2025-34247-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34246","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34246-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.87+00:00","url":"https://junglewise.ai/threats/cve-2025-34246-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34245","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34245-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.717+00:00","url":"https://junglewise.ai/threats/cve-2025-34245-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34244","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34244-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.56+00:00","url":"https://junglewise.ai/threats/cve-2025-34244-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34243","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34243-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.41+00:00","url":"https://junglewise.ai/threats/cve-2025-34243-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34242","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34242-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.27+00:00","url":"https://junglewise.ai/threats/cve-2025-34242-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"},{"cve":"CVE-2025-34241","cvss":6.5,"epss":0.0031,"slug":"cve-2025-34241-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql","title":"Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in…","severity":"medium","exploited":false,"published_at":"2025-11-06T20:15:48.1+00:00","url":"https://junglewise.ai/threats/cve-2025-34241-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-sql"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}