Application Server
210 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Application Server, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Application Server CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 1 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 210 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical56
- High54
- Medium84
- Low16
Latest CVEs
The 15 most recently published vulnerabilities affecting Application Server.
- CVE-2025-8386AVEVA Application Server IDE Basic Cross-site Scripting6.9
- CVE-2024-7113Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server7.5
- CVE-2023-34982AVEVA Operations Control Logger External Control of File Name or Path 5.5
- CVE-2023-33873AVEVA Operations Control Logger Execution with Unnecessary Privileges 7.8
- CVE-2016-15023SiteFusion Application Server Extension getextension.php path traversal3.5
- CVE-2020-6262Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740) allows an attacker to inject code that can be executed ...8.8
- CVE-2020-1967Segmentation fault in SSL_check_chain7.5
- CVE-2018-5407Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.4.7
- CVE-2018-0734Timing attack against DSA5.9
- CVE-2018-0735Timing attack against ECDSA signature generation5.9
- CVE-2017-14995The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex Event Processor 4.2.0, WSO2 Dashboard Server 2.0.0, WSO2 ...6.1
- CVE-2017-14651WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.4.8
- CVE-2016-2183The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for ...7.5
- CVE-2009-3412Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknow...1.0
- CVE-2010-0070Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect integrity via unknown vectors.4.3
Product grouping is registry-driven, with AI assist and human review. How it works