SC
Vendor
Scada-lts
29
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115803 New | SC Scada-LTS Scada-lts | 4.3 | Oct 24 | Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization |
| CVE-2026-84860 | SC Scada-LTS Scada-LTS | 8.8 | Sep 16 | Scada-LTS DWR Authorization Bypass - Systemic |
| CVE-2026-84859 | SC Scada-LTS Scada-LTS | 6.5 | Sep 16 | Scada-LTS Authenticated Blind SQL Injection |
| CVE-2026-84858 | SC Scada-LTS Scada-LTS | 8.8 | Sep 16 | Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass |
| CVE-2026-19657 | SC ScadaLTS SCADA-LTS | 6.1 | Aug 12 | ScadaLTS Unauthenticated Reflected XSS |
| CVE-2026-19656 | SC ScadaLTS SCADA-LTS | 9.9 | Aug 12 | ScadaLTS Authenticated Remote Code Execution |
| CVE-2025-13791 | SC Scada-LTS Scada-lts | 6.5 | Nov 30 | Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal |
| CVE-2025-13790 | SC Scada-LTS Scada-lts | 8.8 | Nov 30 | Scada-LTS cross-site request forgery |
| CVE-2025-10235 | SC Scada-lts Scada-lts | 4.8 | Sep 11 | Scada-LTS Reports reports.shtm cross site scripting |
| CVE-2025-10234 | SC Scada-lts Scada-lts | 4.8 | Sep 10 | Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting |
| CVE-2025-9404 | SC Scada-lts Scada-lts | 5.4 | Aug 25 | Scada-LTS Folder pointHierarchySLTS cross site scripting |
| CVE-2025-9388 | SC Scada-lts Scada-lts | 5.4 | Aug 24 | Scada-LTS watch_list.shtm cross site scripting |
| CVE-2025-9235 | SC Scada-lts Scada-lts | 5.4 | Aug 20 | Scada-LTS compound_events.shtm cross site scripting |
| CVE-2025-9234 | SC Scada-lts Scada-lts | 5.4 | Aug 20 | Scada-LTS maintenance_events.shtm cross site scripting |
| CVE-2025-9233 | SC Scada-lts Scada-lts | 5.4 | Aug 20 | Scada-LTS view_edit.shtm cross site scripting |
| CVE-2025-9145 | SC Scada-lts Scada-lts | 5.4 | Aug 19 | Scada-LTS SVG File view_edit.shtm cross site scripting |
| CVE-2025-9144 | SC Scada-lts Scada-lts | 5.4 | Aug 19 | Scada-LTS publisher_edit.shtm cross site scripting |
| CVE-2025-9143 | SC Scada-lts Scada-lts | 5.4 | Aug 19 | Scada-LTS mailing_lists.shtm cross site scripting |
| CVE-2025-9139 | SC Scada-lts Scada-lts | 6.5 | Aug 19 | Scada-LTS WatchListDwr.init.dwr information disclosure |
| CVE-2025-9138 | SC Scada-lts Scada-lts | 5.4 | Aug 19 | Scada-LTS new cross site scripting |
| CVE-2025-9137 | SC Scada-lts Scada-lts | 4.8 | Aug 19 | Scada-LTS scheduled_events.shtm cross site scripting |
| CVE-2025-8743 | SC Scada-lts Scada-lts | 5.4 | Aug 8 | Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting |
| CVE-2025-7729 | SC Scada-lts Scada-lts | 5.4 | Jul 17 | Scada-LTS usersProfiles.shtm cross site scripting |
| CVE-2025-7728 | SC Scada-lts Scada-lts | 5.4 | Jul 17 | Scada-LTS users.shtm cross site scripting |
| CVE-2024-7901 | SC Scada-lts Scada-lts | 5.4 | Aug 17 | Scada-LTS Message Scada cross site scripting |
| CVE-2023-33472 | SC Scada-lts Scada-lts | 8.8 | Jan 13 | An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code,… |
| CVE-2022-41976 | SC Scada-lts Scada-lts | 8.8 | Apr 10 | An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change… |