WebAccess/VPN vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WE

Product

WebAccess/VPN

by Advantech · last CVE Nov 6, 2025

12

CVEs

0

On KEV

7.2

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 1Medium 11Low 0

Severity

All severities12 Critical0 High1 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WebAccess/VPN to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-34247	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction() Affected: before 1.1.5
CVE-2025-34246	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction() Affected: before 1.1.5
CVE-2025-34245	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction() Affected: before 1.1.5
CVE-2025-34244	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction() Affected: before 1.1.5
CVE-2025-34243	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction() Affected: before 1.1.5
CVE-2025-34242	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction() Affected: before 1.1.5
CVE-2025-34241	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction() Affected: before 1.1.5
CVE-2025-34240	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction() Affected: before 1.1.5
CVE-2025-34238	6.5	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() Affected: before 1.1.5
CVE-2025-34237	5.4	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction() Affected: before 1.1.5
CVE-2025-34236	5.4	0%	Nov 6	Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction() Affected: before 1.1.5