What’s Vulnerable › Products

arcinfo PcVue vulnerabilities

24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your arcinfo PcVue version is affected

Latest arcinfo PcVue vulnerabilities

• CVE-2026-14868 — Weak encryption mechanism for User directory (CVSS 5.5)
• CVE-2026-14867 — Insecure password storage in User directory (CVSS 5.5)
• CVE-2026-1698 — HTTP Host header vulnerability in WebClient and WebScheduler web apps (CVSS 6.1)
• CVE-2026-1697 — Use of unsecure cookies for GraphicalData web service and WebClient web app (CVSS 6.5)
• CVE-2026-1696 — Missing security HTTP headers (CVSS 6.1)
• CVE-2026-1695 — XSS vulnerability upon unsuccessful authentication (CVSS 6.1)
• CVE-2026-1694 — Server configuration details in HTTP headers (CVSS 4.3)
• CVE-2026-1693 — Use of vulnerable Resource Owner Password Credentials flow (CVSS 7.5)
• CVE-2026-1692 — Missing origin validation in GraphicalData web service requests (CVSS 6.1)
• CVE-2025-9999 — Improper validation of payload elements (CVSS 7.6)
• CVE-2025-9998 — Improper validation of packets sequencing (CVSS 6.0)
• CVE-2025-4384 — Certificate validity not properly verified (CVSS 6.0)
• CVE-2024-12057 — User credentials recorded in log files (CVSS 1.8)
• CVE-2024-12056 — Client Secret not checked with OAuth Password grant type (CVSS 2.3)
• CVE-2022-4312 — (CVSS 5.5)
• CVE-2022-4311 — (CVSS 6.5)
• CVE-2022-2569 — ARC Informatique PcVue (CVSS 5.5)
• CVE-2020-26869 — ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor (CVSS 7.5)
• CVE-2020-26868 — ARC Informatique PcVue Access to Critical Private Variable via Public Method (CVSS 7.5)
• CVE-2020-26867 — ARC Informatique PcVue Deserialization of Untrusted Data (CVSS 9.8)
• CVE-2011-4045 — (CVSS 4.3)
• CVE-2011-4044 — (CVSS 5.8)
• CVE-2011-4043 — (CVSS 9.3)
• CVE-2011-4042 — (CVSS 9.3)