Skip to content
AAdvantech Co., Ltd.
Exploited and recent CVEs
-
CVE-2025-34256
Critical 10.0
Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass
0.7%
-
CVE-2025-34265
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines
0.2%
-
CVE-2025-34263
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus
0.2%
-
CVE-2025-34266
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus
0.2%
-
CVE-2025-34264
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}
0.2%
-
CVE-2025-34262
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}
0.2%
-
CVE-2025-34258
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan
0.2%
-
CVE-2025-34259
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building
0.3%
-
CVE-2025-34261
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/
0.3%
-
CVE-2025-34260
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule
0.3%
-
CVE-2025-34257
Medium 5.1
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined
0.3%