PatchTheCVE: industrial automation aprolhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-5624: Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a netwohttps://patchthecve.com/cve/CVE-2024-5624.htmlhttps://patchthecve.com/cve/CVE-2024-5624.htmlWed, 17 Jun 2026 08:16:18 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser sessionCVE-2024-5623: An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attackhttps://patchthecve.com/cve/CVE-2024-5623.htmlhttps://patchthecve.com/cve/CVE-2024-5623.htmlWed, 17 Jun 2026 08:16:18 +0000HIGH 7.8: An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.CVE-2024-5622: An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.https://patchthecve.com/cve/CVE-2024-5622.htmlhttps://patchthecve.com/cve/CVE-2024-5622.htmlWed, 17 Jun 2026 08:16:18 +0000HIGH 7.8: An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.