How many CVEs does Bentley Systems have?

Bentley Systems has 227 published CVE records since 2012, including 2 in the last two years.

How many Bentley Systems CVEs are in CISA KEV?

Yes — 2 of Bentley Systems's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Bentley Systems products have the most CVEs?

The Bentley Systems products with the most published CVEs are View, MicroStation, MicroStation Connect, bentley view, contextcapture viewer.

What are the most common weakness types in Bentley Systems CVEs?

Bentley Systems's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow).

How many critical Bentley Systems vulnerabilities are there?

Bentley Systems has 2 critical and 163 high-severity CVEs.

What is the average severity of Bentley Systems CVEs?

The average CVSS base score across Bentley Systems's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

227 CVEs

2 in CISA KEV

Bentley Systems Vulnerabilities

Name: Bentley Systems vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Bentley Systems.

227

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.0

Avg CVSS

2012–2026

Overview

Bentley Systems has 227 published CVE records since 2012, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Bentley Systems products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Bentley Systems's vulnerability posture, as a share of its 227 published CVEs.

Average CVSS: 7.0
Critical / high: 73%
Actively exploited (KEV): 1%
Public exploit available: 1%
Patch available: 97%

Severity and exploitation

How the CVSS severity of Bentley Systems's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High163

Medium35

Low27

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of Bentley Systems's CVEs are confirmed exploited in the wild.

Public exploits

3

3 of Bentley Systems's CVEs have a known public exploit available.

Most affected products

The Bentley Systems products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Bentley Systems CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Bentley Systems CVE records.

Disclosure activity by year

How many Bentley Systems CVEs were published each year.

2012

1

2021

1

2022

183

2023

33

2024

7

2025

1

2026

1

Latest Bentley Systems CVEs

The most recently disclosed vulnerabilities affecting Bentley Systems.

Bentley Systems iTwin Platform exposed access token
CWE-540
Medium · CVSS 6.9
EPSS 0.3%2026-04-02
Medium vulnerability · 2025-01-31
CWE-648
Medium · CVSS 6.4
EPSS 0.1%2025-01-31
Medium vulnerability · 2024-05-07
CWE-125
Medium · CVSS 5.5
EPSS 0.3%2024-05-07
High vulnerability · 2024-05-07
CWE-122
High · CVSS 7.8
EPSS 0.3%2024-05-07
High vulnerability · 2024-05-07
CWE-787
High · CVSS 7.8
EPSS 0.3%2024-05-07
Medium vulnerability · 2024-05-07
CWE-416
Medium · CVSS 5.5
EPSS 0.3%2024-05-07
High vulnerability · 2024-05-07
CWE-416
High · CVSS 7.8
EPSS 0.3%2024-05-07
High vulnerability · 2024-05-03
CWE-416
High · CVSS 7.8
EPSS 0.7%2024-05-03
Critical vulnerability · 2024-02-26
CWE-488
Critical · CVSS 9.1
EPSS 0.6%2024-02-26
High vulnerability · 2023-12-22
High · CVSS 8.6
EPSS 0.5%2023-12-22
High vulnerability · 2023-09-12
CISA KEV
CWE-787
High · CVSS 8.8
EPSS 99.7%2023-09-12
High vulnerability · 2023-03-29
CWE-787
High · CVSS 7.8
EPSS 0.9%2023-03-29

Track new Bentley Systems CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Bentley Systems CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Linksys233 CVEs Delta Electronics226 CVEs project224 CVEs OpenEMR224 CVEs WWBN224 CVEs glpi-project223 CVEs H3C223 CVEs Trendnet221 CVEs

Browse all vendors

Frequently asked questions

Common questions about Bentley Systems vulnerabilities.

How many CVEs does Bentley Systems have?: Bentley Systems has 227 published CVE records since 2012, including 2 in the last two years.
How many Bentley Systems CVEs are in CISA KEV?: Yes — 2 of Bentley Systems's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Bentley Systems products have the most CVEs?: The Bentley Systems products with the most published CVEs are View, MicroStation, MicroStation Connect, bentley view, contextcapture viewer.
What are the most common weakness types in Bentley Systems CVEs?: Bentley Systems's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow).
Are there public exploits for Bentley Systems vulnerabilities?: Yes — 3 of Bentley Systems's CVEs have a known public exploit.
How many critical Bentley Systems vulnerabilities are there?: Bentley Systems has 2 critical and 163 high-severity CVEs.
What is the average severity of Bentley Systems CVEs?: The average CVSS base score across Bentley Systems's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Bentley Systems vulnerabilities

Monitor new Bentley Systems vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing