CVE-2025-13791
- EPSS 0.1%
- Veröffentlicht 30.11.2025 15:32:05
- Zuletzt bearbeitet 04.12.2025 20:26:55
A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack...
CVE-2025-13790
- EPSS 0.05%
- Veröffentlicht 30.11.2025 14:32:06
- Zuletzt bearbeitet 04.12.2025 20:27:39
A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The v...
CVE-2025-10235
- EPSS 0.03%
- Veröffentlicht 11.09.2025 00:32:06
- Zuletzt bearbeitet 02.10.2025 20:18:25
A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated ...
CVE-2025-10234
- EPSS 0.03%
- Veröffentlicht 10.09.2025 23:32:06
- Zuletzt bearbeitet 02.10.2025 20:19:10
A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /data_point_edit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross sit...
CVE-2025-9404
- EPSS 0.03%
- Veröffentlicht 25.08.2025 02:32:06
- Zuletzt bearbeitet 11.09.2025 15:36:37
A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possib...
CVE-2025-9388
- EPSS 0.03%
- Veröffentlicht 24.08.2025 12:32:08
- Zuletzt bearbeitet 11.09.2025 15:37:27
A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watch_list.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The e...
CVE-2025-9235
- EPSS 0.03%
- Veröffentlicht 20.08.2025 17:02:08
- Zuletzt bearbeitet 11.09.2025 15:37:48
A flaw has been found in Scada-LTS up to 2.7.8.1. The impacted element is an unknown function of the file compound_events.shtm. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-9234
- EPSS 0.03%
- Veröffentlicht 20.08.2025 17:02:06
- Zuletzt bearbeitet 11.09.2025 15:38:04
A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file maintenance_events.shtm. The manipulation of the argument Alias results in cross site scripting. The attack can be executed remotely. The...
CVE-2025-9233
- EPSS 0.03%
- Veröffentlicht 20.08.2025 15:32:06
- Zuletzt bearbeitet 11.09.2025 15:38:15
A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The...
CVE-2025-9145
- EPSS 0.03%
- Veröffentlicht 19.08.2025 15:32:07
- Zuletzt bearbeitet 11.09.2025 13:54:47
A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scriptin...