Vulnerabilities in Tridium
11 resultsCVE-2025-3943MEDIUMUse of GET Request Method With sensitive Query StringsEPSS 7.1%CVE-2018-18985—Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2EPSS 1.0%CVE-2025-3945HIGHImproper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)EPSS 0.6%CVE-2025-3944HIGHIncorrect Permission Assignment for Critical ResourceEPSS 0.5%CVE-2025-3941MEDIUMImproper Handling of Windows: DATA Alternate Data StreamEPSS 0.5%CVE-2025-3936MEDIUMIncorrect Permission Assignment for Critical ResourceEPSS 0.4%CVE-2025-3938MEDIUMMissing Cryptographic StepEPSS 0.3%CVE-2025-3937HIGHUse of Password Hash with Insufficient Computational EffortEPSS 0.3%CVE-2025-3940MEDIUMImproper Use of Validation FrameworkEPSS 0.3%CVE-2025-3939MEDIUMObservable Response DiscrepancyEPSS 0.3%CVE-2025-3942MEDIUMImproper Output Neutralization for LogsEPSS 0.2%