Vendor
Tridium
21 known vulnerabilities in products by Tridium, 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-16748 | ICS-CERT Niagara AX Framework and Niagara 4 Framework: Improper Authentication | 9.8 | |
| High | CVE-2017-16744 | ICS-CERT Niagara AX Framework and Niagara 4 Framework: Path Traversal | 7.2 | |
| High | CVE-2025-3943 | Use of GET Request Method With sensitive Query Strings | 4.1 | |
| Not rated | CVE-2012-4701 | Tridium Niagara Ax: Path Traversal | — | |
| Critical | CVE-2025-3945 | Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) | 7.2 | |
| Critical | CVE-2025-3944 | Incorrect Permission Assignment for Critical Resource | 7.2 | |
| Not rated | CVE-2012-4027 | Tridium Niagara Ax: Path Traversal | — | |
| Medium | CVE-2018-18985 | Tridium Niagara: Cross-site Scripting | 5.4 | |
| Not rated | CVE-2012-3024 | Tridium Niagara Ax: Authentication Bypass | — | |
| Critical | CVE-2025-3937 | Use of Password Hash with Insufficient Computational Effort | 7.7 | |
| Not rated | CVE-2012-3025 | Tridium Niagara Ax: Information Disclosure | — | |
| Critical | CVE-2025-3941 | Improper Handling of Windows: DATA Alternate Data Stream | 5.4 | |
| Critical | CVE-2025-3936 | Incorrect Permission Assignment for Critical Resource | 6.5 | |
| Medium | CVE-2026-11804 | Program Module Vulnerability | 5.2 | |
| Critical | CVE-2025-3938 | Missing Cryptographic Step | 6.8 | |
| Not rated | CVE-2012-4028 | Tridium Niagara Ax: security vulnerability | — | |
| Critical | CVE-2025-3940 | Improper Use of Validation Framework | 5.3 | |
| Medium | CVE-2025-3939 | Observable Response Discrepancy | 5.3 | |
| High | CVE-2025-3942 | Improper Output Neutralization for Logs | 4.3 | |
| Medium | CVE-2020-14483 | Niagara: Synchronous Access of Remote Resource without Timeout | 4.3 | |
| Medium | CVE-2019-13528 | Niagara: Improper Authorization | 4.4 |
Products
| Tridium Niagara Enterprise Security | 23 | 0 |
| Tridium Niagara | 14 | 0 |
| Niagara Framework | 11 | 0 |
| Tridium Niagara Ax | 6 | 0 |
| Tridium Niagara AX Framework | 3 | 0 |