PatchTheCVEinductiveautomation vulnerabilities
Recent CVEs affecting inductiveautomation products. 19 tracked.
inductiveautomation has 19 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 19. Most recent: 2026-03-12. Highest priority: CVE-2023-39475 (score 64/100).
- CVE-2025-13913 MEDIUM 6.3 UPGRADE A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payl
- CVE-2023-50233 HIGH 8.8 UPGRADE Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-50232 HIGH 8.8 UPGRADE Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability
- CVE-2023-50223 HIGH 8.8 UPGRADE Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vu
- CVE-2023-50222 HIGH 8.8 UPGRADE Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execut
- CVE-2023-50221 HIGH 8.8 UPGRADE Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code
- CVE-2023-50220 HIGH 8.8 UPGRADE Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerabil
- CVE-2023-50219 HIGH 8.8 UPGRADE Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2023-50218 HIGH 8.8 UPGRADE Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerabili
- CVE-2023-39477 HIGH 7.5 UPGRADE Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2023-39476 CRITICAL 9.8 UPGRADE Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution V
- CVE-2023-39475 CRITICAL 9.8 UPGRADE Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote
- CVE-2023-39474 HIGH 8.8 UPGRADE Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability
- CVE-2023-39473 HIGH 8.8 UPGRADE Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution
- CVE-2023-39472 MEDIUM 6.5 UPGRADE Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerabil
- CVE-2023-38124 HIGH 8.8 UPGRADE Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execu
- CVE-2023-38123 HIGH 8.8 UPGRADE Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication
- CVE-2023-38122 HIGH 7.2 UPGRADE Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnera
- CVE-2023-38121 CRITICAL 9.0 UPGRADE Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability
FAQ
How do I fix inductiveautomation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inductiveautomation being exploited right now?
None of the tracked inductiveautomation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inductiveautomation CVE should I patch first?
CVE-2023-39475 currently ranks highest (64/100): Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote .