CVE-2025-13913 | Medium | 6.3 | 2026-03-12 | A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code. |
CVE-2025-13911 | Medium | 6.4 | 2025-12-18 | The vulnerability affects Ignition SCADA applications where Python
scripting is utilized for automation purposes. The vulnerability arises
from the absence o… |
CVE-2023-50233 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… |
CVE-2023-50232 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2023-50223 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote att… |
CVE-2023-50222 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remo… |
CVE-2023-50221 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allow… |
CVE-2023-50220 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers t… |
CVE-2023-50219 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe… |
CVE-2023-50218 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… |
CVE-2023-39477 | High | 7.5 | 2024-05-03 | Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a deni… |
CVE-2023-39476 | Critical | 9.8 | 2024-05-03 | Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote at… |
CVE-2023-39475 | Critical | 9.8 | 2024-05-03 | Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability… |
CVE-2023-39474 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2023-39473 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition AbstractGatewayFunction Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote a… |
CVE-2023-39472 | Medium | 6.5 | 2024-05-03 | Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers t… |
CVE-2023-38124 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows rem… |
CVE-2023-38123 | High | 8.8 | 2024-05-03 | Inductive Automation Ignition OPC UA Quick Client Missing Authentication for Critical Function Authentication Bypass Vulnerability. This vulnerability allows r… |
CVE-2023-38122 | High | 7.2 | 2024-05-03 | Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability. This vulnerability allows remote attacker… |
CVE-2023-38121 | Critical | 9.0 | 2024-05-03 | Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… |
CVE-2022-1704 | High | 7.6 | 2022-08-05 | Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack… |
CVE-2022-35873 | High | 7.8 | 2022-07-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User inte… |
CVE-2022-35872 | High | 7.8 | 2022-07-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User inte… |
CVE-2022-35871 | High | 7.8 | 2022-07-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentic… |
CVE-2022-35870 | High | 7.8 | 2022-07-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although… |
CVE-2022-35869 | Critical | 9.8 | 2022-07-25 | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentica… |
CVE-2022-1264 | Medium | 6.8 | 2022-07-20 | The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code. |
CVE-2020-14479 | Medium | 5.3 | 2022-04-01 | Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the s… |