https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-50595.htmlhttps://patchthecve.com/cve/CVE-2022-50595.htmlWed, 17 Jun 2026 05:23:51 +0000HIGH 7.2: Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_search_value’ parameter to the ‘NetworkServlet’ endpoint. Successful ehttps://patchthecve.com/cve/CVE-2022-50594.htmlhttps://patchthecve.com/cve/CVE-2022-50594.htmlWed, 17 Jun 2026 05:23:51 +0000HIGH 7.5: Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘data’ parameter to the ‘NetworkServlet’ endpoint. Successful exploitation https://patchthecve.com/cve/CVE-2022-50593.htmlhttps://patchthecve.com/cve/CVE-2022-50593.htmlWed, 17 Jun 2026 05:23:51 +0000CRITICAL 9.8: Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘search_term’ parameter to the ‘NetworkServlet’ endpoint. Successful exploihttps://patchthecve.com/cve/CVE-2022-50592.htmlhttps://patchthecve.com/cve/CVE-2022-50592.htmlWed, 17 Jun 2026 05:23:51 +0000HIGH 7.2: Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘getInventoryReportData’ parameter to the ‘NetworkServlet’ endpoint. Succeshttps://patchthecve.com/cve/CVE-2022-50591.htmlhttps://patchthecve.com/cve/CVE-2022-50591.htmlWed, 17 Jun 2026 05:23:51 +0000CRITICAL 9.8: Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp_config_id’ parameter to the ‘NetworkServlet’ endpoint. Successful explhttps://patchthecve.com/cve/CVE-2025-53519.htmlhttps://patchthecve.com/cve/CVE-2025-53519.htmlWed, 17 Jun 2026 09:38:22 +0000MEDIUM 5.4: A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosurehttps://patchthecve.com/cve/CVE-2025-53515.htmlhttps://patchthecve.com/cve/CVE-2025-53515.htmlWed, 17 Jun 2026 09:38:21 +0000HIGH 8.8: A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServlet.archiveTrap(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not sanitized, allowing an attacker to perform Shttps://patchthecve.com/cve/CVE-2025-53509.htmlhttps://patchthecve.com/cve/CVE-2025-53509.htmlWed, 17 Jun 2026 09:38:21 +0000MEDIUM 6.5: A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbihttps://patchthecve.com/cve/CVE-2025-53475.htmlhttps://patchthecve.com/cve/CVE-2025-53475.htmlWed, 17 Jun 2026 09:38:16 +0000HIGH 8.8: A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage(). This issue requires an authenticated attacker with at least user-level privileges. Certain parameters in this function are not properly sanitized, allohttps://patchthecve.com/cve/CVE-2025-53397.htmlhttps://patchthecve.com/cve/CVE-2025-53397.htmlWed, 17 Jun 2026 09:38:08 +0000MEDIUM 5.4: A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other mahttps://patchthecve.com/cve/CVE-2025-52577.htmlhttps://patchthecve.com/cve/CVE-2025-52577.htmlWed, 17 Jun 2026 09:36:42 +0000HIGH 8.8: A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not properly sanitized, allowing an attackhttps://patchthecve.com/cve/CVE-2025-48891.htmlhttps://patchthecve.com/cve/CVE-2025-48891.htmlWed, 17 Jun 2026 09:30:26 +0000HIGH 7.6: A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-servicehttps://patchthecve.com/cve/CVE-2025-46704.htmlhttps://patchthecve.com/cve/CVE-2025-46704.htmlWed, 17 Jun 2026 09:26:50 +0000MEDIUM 4.3: A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowhttps://patchthecve.com/cve/CVE-2025-41442.htmlhttps://patchthecve.com/cve/CVE-2025-41442.htmlWed, 17 Jun 2026 09:22:52 +0000MEDIUM 5.4: A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclhttps://patchthecve.com/cve/CVE-2023-52335.htmlhttps://patchthecve.com/cve/CVE-2023-52335.htmlWed, 17 Jun 2026 06:42:30 +0000HIGH 7.5: Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists