Product by Tridium

    Niagara Framework

    11 known vulnerabilities in Niagara Framework (Tridium), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Niagara Framework (Tridium)
    HighCVE-2025-3943

    Use of GET Request Method With sensitive Query Strings

    also in 2 other products

    4.1
    CriticalCVE-2025-3945

    Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

    also in 2 other products

    7.2
    CriticalCVE-2025-3944

    Incorrect Permission Assignment for Critical Resource

    also in 2 other products

    7.2
    CriticalCVE-2025-3937

    Use of Password Hash with Insufficient Computational Effort

    also in 2 other products

    7.7
    CriticalCVE-2025-3941

    Improper Handling of Windows: DATA Alternate Data Stream

    also in 2 other products

    5.4
    MediumCVE-2026-11804

    Program Module Vulnerability

    also in 1 other product

    5.2
    CriticalCVE-2025-3936

    Incorrect Permission Assignment for Critical Resource

    also in 2 other products

    6.5
    CriticalCVE-2025-3938

    Missing Cryptographic Step

    also in 2 other products

    6.8
    CriticalCVE-2025-3940

    Improper Use of Validation Framework

    also in 2 other products

    5.3
    MediumCVE-2025-3939

    Observable Response Discrepancy

    also in 2 other products

    5.3
    HighCVE-2025-3942

    Improper Output Neutralization for Logs

    also in 2 other products

    4.3

    All products by Tridium