Login Request a demo
WE
Product
WebAccess/VPN
by Advantech · last CVE Nov 6, 2025
12
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 1Medium 11Low 0
Severity
All severities12Critical0High1Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WebAccess/VPN to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-34239
7.2
2%
Nov 6
Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction()
Affected: before 1.1.5
CVE-2025-34247
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction()
Affected: before 1.1.5
CVE-2025-34246
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction()
Affected: before 1.1.5
CVE-2025-34245
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction()
Affected: before 1.1.5
CVE-2025-34244
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction()
Affected: before 1.1.5
CVE-2025-34243
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()
Affected: before 1.1.5
CVE-2025-34242
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()
Affected: before 1.1.5
CVE-2025-34241
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction()
Affected: before 1.1.5
CVE-2025-34240
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction()
Affected: before 1.1.5
CVE-2025-34238
6.5
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction()
Affected: before 1.1.5
CVE-2025-34237
5.4
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()
Affected: before 1.1.5
CVE-2025-34236
5.4
0%
Nov 6
Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction()
Affected: before 1.1.5
Showing 12