CVE-2025-34246 in WebAccess
Сводка
по MITRE • 06.11.2025
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction() that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.