How many Tridium niagara CVEs are in CISA KEV?

None of Tridium niagara's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Tridium niagara are affected?

14 distinct Tridium niagara versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tridium niagara CVEs?

Tridium niagara's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-117 (Improper Output Neutralization for Logs), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy).

How many critical Tridium niagara vulnerabilities are there?

Tridium niagara has 8 critical and 3 high-severity CVEs.

What is the average severity of Tridium niagara CVEs?

The average CVSS base score across Tridium niagara's scored CVEs is 8.3.

RadicalNotion.AI

Log in Create an account

Tridium

14 CVEs

Tridium niagara Vulnerabilities

Name: Tridium niagara vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for niagara by Tridium.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.3

Avg CVSS

2018–2025

Last updated May 22, 2025

Overview

Tridium niagara has 14 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.3. Affected platforms include linux, qnx, windows.

Severity and exploitation

How the CVSS severity of Tridium niagara's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High3

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tridium niagara's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Tridium niagara CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Tridium niagara version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.10u10 <= v <= 4.10u1010 CVEs
4.14u1 <= v <= 4.14u110 CVEs
4.15 <= v <= 4.1510 CVEs
< 4.4.93.40.21 CVE
<= 4.41 CVE
4.0 <= v <= 4.41 CVE
4.4u2 <= v <= 4.4u21 CVE
4.6 <= v < 4.6.96.28.41 CVE
4.6.96.28 <= v <= 4.6.96.281 CVE
4.7.109.20 <= v <= 4.7.109.201 CVE
4.7.110.32 <= v <= 4.7.110.321 CVE
4.8.0.110 <= v <= 4.8.0.1101 CVE

Fixed in

4.4.93.40.21 CVE
4.6.96.28.41 CVE

Find a version

14 CVEs

Sort

Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
CVE-2025-3945
Patch
CWE-88
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3944
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Use of GET Request Method With sensitive Query Strings
CVE-2025-3943
Patch
CWE-598
High · CVSS 7.5
EPSS 10.7% (96th pct)2025-05-22
Improper Output Neutralization for Logs
CVE-2025-3942
Patch
CWE-117
High · CVSS 7.5
EPSS 0.3% (21th pct)2025-05-22
Improper Handling of Windows: DATA Alternate Data Stream
CVE-2025-3941
Patch
CWE-69
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Improper Use of Validation Framework
CVE-2025-3940
Patch
CWE-1173
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Observable Response Discrepancy
CVE-2025-3939
Patch
CWE-204
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2025-05-22
Missing Cryptographic Step
CVE-2025-3938
Patch
CWE-325
Critical · CVSS 9.8
EPSS 0.3% (27th pct)2025-05-22
Use of Password Hash with Insufficient Computational Effort
CVE-2025-3937
Patch
CWE-916
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3936
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.4% (31th pct)2025-05-22
Medium vulnerability · 2020-08-13
CVE-2020-14483CWE-1088
Medium · CVSS 4.3
EPSS 0.4% (35th pct)2020-08-13
Medium vulnerability · 2019-01-29
CVE-2018-18985
Patch
CWE-79
Medium · CVSS 5.4
EPSS 1.0% (61th pct)2019-01-29
Critical vulnerability · 2018-08-20
CVE-2017-16748CWE-287
Critical · CVSS 9.8
EPSS 5.3% (92th pct)2018-08-20
High vulnerability · 2018-08-20
CVE-2017-16744CWE-22
High · CVSS 7.2
EPSS 6.2% (93th pct)2018-08-20

Common weakness types

The CWE weakness categories most often found in Tridium niagara CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Tridium niagara CVEs were published each year.

2018

2

2019

1

2020

1

2025

10

Other Tridium products

Browse vulnerabilities for other products by Tridium.

Niagara Enterprise Security13 CVEs Niagara Framework11 CVEs niagara ax6 CVEs niagara ax framework3 CVEs edge 101 CVEs jace 3e1 CVEs jace 6e1 CVEs jace 71 CVEs

All Tridium vulnerabilities

Frequently asked questions

Common questions about Tridium niagara vulnerabilities.

How many CVEs does Tridium niagara have?: Tridium niagara has 14 published CVE records since 2018.
How many Tridium niagara CVEs are in CISA KEV?: None of Tridium niagara's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tridium niagara vulnerabilities?: No Tridium niagara CVEs currently have a tracked public exploit in this dataset.
Which versions of Tridium niagara are affected?: 14 distinct Tridium niagara versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tridium niagara CVEs?: Tridium niagara's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-117 (Improper Output Neutralization for Logs), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy).
How many critical Tridium niagara vulnerabilities are there?: Tridium niagara has 8 critical and 3 high-severity CVEs.
What is the average severity of Tridium niagara CVEs?: The average CVSS base score across Tridium niagara's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tridium niagara vulnerabilities

Get an alert for each new Tridium niagara CVE, with AI-written analysis and remediation steps.

Create an account See pricing