How many Tridium Niagara Enterprise Security CVEs are in CISA KEV?

None of Tridium Niagara Enterprise Security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Tridium Niagara Enterprise Security are affected?

19 distinct Tridium Niagara Enterprise Security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tridium Niagara Enterprise Security CVEs?

Tridium Niagara Enterprise Security's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-117 (Improper Output Neutralization for Logs), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy).

What is the average severity of Tridium Niagara Enterprise Security CVEs?

The average CVSS base score across Tridium Niagara Enterprise Security's scored CVEs is 8.0.

RadicalNotion.AI

Log in Create an account

Tridium

13 CVEs

Tridium Niagara Enterprise Security Vulnerabilities

Name: Tridium Niagara Enterprise Security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Niagara Enterprise Security by Tridium.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.0

Avg CVSS

2019–2026

Last updated July 23, 2026

Overview

Tridium Niagara Enterprise Security has 13 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.0. Affected platforms include linux, qnx, windows.

Severity and exploitation

How the CVSS severity of Tridium Niagara Enterprise Security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tridium Niagara Enterprise Security's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Tridium Niagara Enterprise Security CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Tridium Niagara Enterprise Security version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.10.1110 CVEs
< 4.14.210 CVEs
< 4.15.110 CVEs
4.10u10 <= v <= 4.10u1010 CVEs
4.14u1 <= v <= 4.14u110 CVEs
4.15 <= v <= 4.1510 CVEs
< 2.3.118.61 CVE
< 4.14.61 CVE
< 4.15.51 CVE
2.3u1 <= v <= 2.3u11 CVE
2.4.31 <= v <= 2.4.311 CVE
2.4.45 <= v <= 2.4.451 CVE
4.8.0.35 <= v <= 4.8.0.351 CVE

Fixed in

4.10.1110 CVEs
4.14.210 CVEs
4.15.110 CVEs
2.3.118.61 CVE
4.14.61 CVE
4.15.51 CVE

Find a version

13 CVEs

Sort

Program Module Vulnerability
CVE-2026-11804
Patch
CWE-280
Medium · CVSS 5.2
EPSS 0.2% (14th pct)2026-07-23
Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
CVE-2025-3945
Patch
CWE-88
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3944
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Use of GET Request Method With sensitive Query Strings
CVE-2025-3943
Patch
CWE-598
High · CVSS 7.5
EPSS 10.7% (96th pct)2025-05-22
Improper Output Neutralization for Logs
CVE-2025-3942
Patch
CWE-117
High · CVSS 7.5
EPSS 0.3% (21th pct)2025-05-22
Improper Handling of Windows: DATA Alternate Data Stream
CVE-2025-3941
Patch
CWE-69
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Improper Use of Validation Framework
CVE-2025-3940
Patch
CWE-1173
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Observable Response Discrepancy
CVE-2025-3939
Patch
CWE-204
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2025-05-22
Missing Cryptographic Step
CVE-2025-3938
Patch
CWE-325
Critical · CVSS 9.8
EPSS 0.3% (27th pct)2025-05-22
Use of Password Hash with Insufficient Computational Effort
CVE-2025-3937
Patch
CWE-916
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3936
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.4% (31th pct)2025-05-22
Medium vulnerability · 2020-08-13
CVE-2020-14483CWE-1088
Medium · CVSS 4.3
EPSS 0.4% (35th pct)2020-08-13
Medium vulnerability · 2019-01-29
CVE-2018-18985
Patch
CWE-79
Medium · CVSS 5.4
EPSS 1.0% (61th pct)2019-01-29

Common weakness types

The CWE weakness categories most often found in Tridium Niagara Enterprise Security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Tridium Niagara Enterprise Security CVEs were published each year.

2019

1

2020

1

2025

10

2026

1

Other Tridium products

Browse vulnerabilities for other products by Tridium.

niagara14 CVEs Niagara Framework11 CVEs niagara ax6 CVEs niagara ax framework3 CVEs edge 101 CVEs jace 3e1 CVEs jace 6e1 CVEs jace 71 CVEs

All Tridium vulnerabilities

Frequently asked questions

Common questions about Tridium Niagara Enterprise Security vulnerabilities.

How many CVEs does Tridium Niagara Enterprise Security have?: Tridium Niagara Enterprise Security has 13 published CVE records since 2019.
How many Tridium Niagara Enterprise Security CVEs are in CISA KEV?: None of Tridium Niagara Enterprise Security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tridium Niagara Enterprise Security vulnerabilities?: No Tridium Niagara Enterprise Security CVEs currently have a tracked public exploit in this dataset.
Which versions of Tridium Niagara Enterprise Security are affected?: 19 distinct Tridium Niagara Enterprise Security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tridium Niagara Enterprise Security CVEs?: Tridium Niagara Enterprise Security's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-117 (Improper Output Neutralization for Logs), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy).
How many critical Tridium Niagara Enterprise Security vulnerabilities are there?: Tridium Niagara Enterprise Security has 7 critical and 2 high-severity CVEs.
What is the average severity of Tridium Niagara Enterprise Security CVEs?: The average CVSS base score across Tridium Niagara Enterprise Security's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tridium Niagara Enterprise Security vulnerabilities

Get an alert for each new Tridium Niagara Enterprise Security CVE, with AI-written analysis and remediation steps.

Create an account See pricing