Bentley

Products

ProductCVEsExploitedLatest
View108–May 7, 2024
MicroStation CONNECT97–Mar 29, 2023
ContextCapture2–Jan 13, 2022
MicroStation1–Mar 29, 2023
ProjectWise Integration Server1–Jan 31, 2025

Exploited and recent CVEs

  • CVE-2024-53007 Medium 6.4 Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call. 0.1%
  • CVE-2022-43656 Low 3.3 Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 0.3%
  • CVE-2022-43655 High 7.8 Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.3%
  • CVE-2022-43653 High 7.8 Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 0.3%
  • CVE-2022-43652 Low 3.3 Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability 0.3%
  • CVE-2022-43651 High 7.8 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability 0.3%
  • CVE-2023-44430 High 7.8 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability 0.7%
  • CVE-2022-28320 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the targ 0.9%
  • CVE-2022-28300 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability 1.0%
  • CVE-2022-28307 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the targ 1.0%
  • CVE-2022-28643 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.9%
  • CVE-2022-28301 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 1.0%
  • CVE-2022-28306 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability 0.9%
  • CVE-2022-28308 Low 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that 0.6%
  • CVE-2022-28311 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability 1.0%
  • CVE-2022-28641 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.9%
  • CVE-2022-28315 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.9%
  • CVE-2022-28642 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.9%
  • CVE-2022-28318 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.6%
  • CVE-2022-28317 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.6%
  • CVE-2022-28313 Low 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulner 0.6%
  • CVE-2022-28645 Low 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnera 0.6%
  • CVE-2022-28304 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability 0.9%
  • CVE-2022-28312 Low 3.3 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulner 0.6%
  • CVE-2022-28310 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability 1.0%
  • CVE-2022-28644 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.9%
  • CVE-2022-28316 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 1.0%
  • CVE-2022-28305 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability 0.9%
  • CVE-2022-28302 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 0.6%
  • CVE-2022-28314 High 7.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability i 1.0%