[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqORdT8SCNBzPV71pDlsTv7Cod2JXl1ibzJsOvbbYX2s":3,"g5a-ex:tridium\u002Fniagara@*":137,"g5a-family:tridium\u002Fniagara":139},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":114,"seoMetadata":115,"meta":134},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"tridium","niagara",13,14,0,"2025-05-22",[14,17,19,22,24,26,28,30,32,35,37,39,41],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"4.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"4.1",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"4.10u10",10,{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},"4.14u1",{"version":25,"cve_count":21,"kev_count":11,"has_kev":16},"4.15",{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},"4.2",{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},"4.3",{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"4.4",{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},"4.4u2",1,{"version":36,"cve_count":34,"kev_count":11,"has_kev":16},"4.6.96.28",{"version":38,"cve_count":34,"kev_count":11,"has_kev":16},"4.7.109.20",{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},"4.7.110.32",{"version":42,"cve_count":34,"kev_count":11,"has_kev":16},"4.8.0.110","Niagara by Tridium is a technology product with 13 tracked versions and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},{"version":25,"cve_count":21,"kev_count":11,"has_kev":16},{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":34,"kev_count":11,"has_kev":16},{"version":36,"cve_count":34,"kev_count":11,"has_kev":16},{"version":38,"cve_count":34,"kev_count":11,"has_kev":16},{"version":40,"cve_count":34,"kev_count":11,"has_kev":16},{"version":42,"cve_count":34,"kev_count":11,"has_kev":16},[59,66,74,80,86,90,94,98,104,109],{"cveId":60,"description":61,"publishedDate":12,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":16,"epssScore":65},"CVE-2025-3943","Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",4.1,"v3.1","Medium",0.10679,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":16,"epssScore":73},"CVE-2017-16744","A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.","2018-08-20",7.2,"v3.0","High",0.0622,{"cveId":75,"description":76,"publishedDate":69,"cvssScore":77,"cvssVersion":71,"severity":78,"isKev":16,"epssScore":79},"CVE-2017-16748","An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.",9.8,"Critical",0.05286,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":71,"severity":64,"isKev":16,"epssScore":85},"CVE-2018-18985","Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.","2019-01-29",5.4,0.00973,{"cveId":87,"description":88,"publishedDate":12,"cvssScore":70,"cvssVersion":63,"severity":72,"isKev":16,"epssScore":89},"CVE-2025-3945","Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",0.00651,{"cveId":91,"description":92,"publishedDate":12,"cvssScore":84,"cvssVersion":63,"severity":64,"isKev":16,"epssScore":93},"CVE-2025-3941","Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",0.00528,{"cveId":95,"description":96,"publishedDate":12,"cvssScore":70,"cvssVersion":63,"severity":72,"isKev":16,"epssScore":97},"CVE-2025-3944","Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",0.00527,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":63,"severity":64,"isKev":16,"epssScore":103},"CVE-2020-14483","A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.","2020-08-13",4.3,0.0042,{"cveId":105,"description":106,"publishedDate":12,"cvssScore":107,"cvssVersion":63,"severity":64,"isKev":16,"epssScore":108},"CVE-2025-3936","Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",6.5,0.00386,{"cveId":110,"description":111,"publishedDate":12,"cvssScore":112,"cvssVersion":63,"severity":64,"isKev":16,"epssScore":113},"CVE-2025-3940","Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",5.3,0.00357,[],{"title":116,"metaDescription":117,"keywords":118,"structuredData":119},"Niagara by Tridium - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Niagara by Tridium covering 13 versions with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Niagara vulnerabilities, Niagara security, Niagara CVE, Tridium Niagara, Niagara threat intelligence, Tridium security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":120,"@type":121,"name":122,"description":117,"url":123,"manufacturer":124,"applicationCategory":128,"softwareVersion":129,"mainEntity":130},"https:\u002F\u002Fschema.org","SoftwareApplication","Niagara","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftridium\u002Fniagara",{"@type":125,"name":126,"url":127},"Organization","Tridium","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftridium","Security Software","13 versions tracked",{"@type":131,"name":132,"description":133,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Niagara Security Vulnerabilities","Security vulnerabilities affecting Niagara by Tridium",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":135,"apiVersion":136},"2026-10-19T03:35:46.709Z","3.0",{"rows":138,"total":11,"capped":16,"failed":11},[],[140,143,146],{"product":141,"cves":142},"niagara_enterprise_security",12,{"product":144,"cves":145},"niagara_ax",6,{"product":147,"cves":148},"niagara_ax_framework",3]