Advantech Co., Ltd. WISE-DeviceOn Server

• CVE-2025-34256 Critical 10.0 Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass 0.7%
• CVE-2025-34265 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines 0.2%
• CVE-2025-34263 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus 0.2%
• CVE-2025-34266 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus 0.2%
• CVE-2025-34264 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId} 0.2%
• CVE-2025-34262 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id} 0.2%
• CVE-2025-34258 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan 0.2%
• CVE-2025-34259 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building 0.3%
• CVE-2025-34261 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/ 0.3%
• CVE-2025-34260 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule 0.3%
• CVE-2025-34257 Medium 5.1 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined 0.3%