VendorsAdvantechwise-deviceon_serverall versions
Vulnerabilities

Advantech Wise-DeviceOn Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2025-34256
Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass
Published 2025-12-05 · Modified
10.0EPSS 0.007
CVE-2025-34257
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined
Published 2025-12-05 · Modified
5.4EPSS 0.003
CVE-2025-34259
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building
Published 2025-12-05 · Modified
5.4EPSS 0.003
CVE-2025-34261
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/
Published 2025-12-05 · Modified
5.4EPSS 0.003
CVE-2025-34260
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule
Published 2025-12-05 · Modified
5.4EPSS 0.003
CVE-2025-34258
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan
Published 2025-12-05 · Modified
5.4EPSS 0.002
CVE-2025-34262
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}
Published 2025-12-05 · Modified
5.4EPSS 0.002
CVE-2025-34266
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus
Published 2025-12-05 · Modified
5.4EPSS 0.002
CVE-2025-34263
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus
Published 2025-12-05 · Modified
5.4EPSS 0.002
CVE-2025-34264
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}
Published 2025-12-05 · Modified
5.4EPSS 0.002
CVE-2025-34265
Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines
Published 2025-12-05 · Modified
5.4EPSS 0.002