What’s Vulnerable › Products

Tridium Niagara vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Tridium Niagara version is affected

Latest Tridium Niagara vulnerabilities

• CVE-2025-3945 — Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) (CVSS 9.8)
• CVE-2025-3944 — Incorrect Permission Assignment for Critical Resource (CVSS 9.8)
• CVE-2025-3943 — Use of GET Request Method With sensitive Query Strings (CVSS 7.5)
• CVE-2025-3942 — Improper Output Neutralization for Logs (CVSS 7.5)
• CVE-2025-3941 — Improper Handling of Windows: DATA Alternate Data Stream (CVSS 9.8)
• CVE-2025-3940 — Improper Use of Validation Framework (CVSS 9.8)
• CVE-2025-3939 — Observable Response Discrepancy (CVSS 5.3)
• CVE-2025-3938 — Missing Cryptographic Step (CVSS 9.8)
• CVE-2025-3937 — Use of Password Hash with Insufficient Computational Effort (CVSS 9.8)
• CVE-2025-3936 — Incorrect Permission Assignment for Critical Resource (CVSS 9.8)
• CVE-2020-14483 — (CVSS 4.3)
• CVE-2018-18985 — (CVSS 5.4)
• CVE-2017-16748 — (CVSS 9.8)
• CVE-2017-16744 — (CVSS 7.2)