Keysight
19 CVEs across 18 Keysight products. Browse Keysight vulnerabilities, severities, and proof-of-concept exploits.
Keysight products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49435 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted pack… |
CVE-2017-20242 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cr… |
CVE-2017-20241 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cra… |
CVE-2025-24525 | High | 7.5 | 2025-09-30 | Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via A… |
CVE-2025-24521 | Medium | 4.9 | 2025-03-05 | External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combinatio… |
CVE-2025-24494 | High | 7.2 | 2025-03-05 | Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular user). In combinatio… |
CVE-2025-23416 | Medium | 4.9 | 2025-03-05 | Path traversal may lead to arbitrary file deletion. The score without least privilege principle violation is as calculated below. In combination with other i… |
CVE-2025-21095 | Medium | 4.9 | 2025-03-05 | Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other i… |
CVE-2023-36853 | High | 7.8 | 2023-07-19 | In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. T… |
CVE-2023-34394 | High | 7.8 | 2023-07-19 | In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM… |
CVE-2023-1967 | Critical | 9.8 | 2023-04-27 | Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid. |
CVE-2023-1860 | Low | 3.5 | 2023-04-05 | A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /license… |
CVE-2023-1399 | High | 7.8 | 2023-03-27 | N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the aff… |
CVE-2022-38130 | Critical | 9.8 | 2022-08-10 | The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zi… |
CVE-2022-38129 | Critical | 9.8 | 2022-08-10 | A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (S… |
CVE-2022-1661 | High | 7.5 | 2022-06-02 | The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files. |
CVE-2022-1660 | Critical | 9.8 | 2022-06-02 | The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remote… |
CVE-2020-35122 | High | 7.5 | 2020-12-15 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a sa… |
CVE-2020-35121 | High | 8.8 | 2020-12-15 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved ma… |