[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKLfZb3bMwlOUBYUezAvuizDqpuhMhwPTL71h-kaUY28":3,"g5a-ex:tridium\u002Fniagara_ax@*":90,"g5a-family:tridium\u002Fniagara_ax":92},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":67,"seoMetadata":68,"meta":87},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"tridium","niagara_ax",4,6,0,"2019-09-24",[14,18,20,22],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.5",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.6",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"3.7",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"3.8u4","Niagara Ax by Tridium is a technology product with 4 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28,29],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},[31,39,46,51,55,61],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":38},"CVE-2012-4701","Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.","2013-02-15",9.3,"v2","Critical",0.06419,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":17,"epssScore":45},"CVE-2012-4027","Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.","2012-07-16",5,"Medium",0.02542,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":17,"epssScore":50},"CVE-2012-3024","Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.","2012-08-16",0.02198,{"cveId":52,"description":53,"publishedDate":49,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":17,"epssScore":54},"CVE-2012-3025","The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.",0.01925,{"cveId":56,"description":57,"publishedDate":42,"cvssScore":58,"cvssVersion":36,"severity":59,"isKev":17,"epssScore":60},"CVE-2012-4028","Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.",7.8,"High",0.01626,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":64,"cvssVersion":65,"severity":44,"isKev":17,"epssScore":66},"CVE-2019-13528","A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).",4.4,"v3.1",0.00354,[],{"title":69,"metaDescription":70,"keywords":71,"structuredData":72},"Niagara Ax by Tridium - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Niagara Ax by Tridium covering 4 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Niagara Ax vulnerabilities, Niagara Ax security, Niagara Ax CVE, Tridium Niagara Ax, Niagara Ax threat intelligence, Tridium security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":73,"@type":74,"name":75,"description":70,"url":76,"manufacturer":77,"applicationCategory":81,"softwareVersion":82,"mainEntity":83},"https:\u002F\u002Fschema.org","SoftwareApplication","Niagara Ax","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftridium\u002Fniagara_ax",{"@type":78,"name":79,"url":80},"Organization","Tridium","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftridium","Security Software","4 versions tracked",{"@type":84,"name":85,"description":86,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Niagara Ax Security Vulnerabilities","Security vulnerabilities affecting Niagara Ax by Tridium",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":88,"apiVersion":89},"2026-10-19T04:53:04.797Z","3.0",{"rows":91,"total":11,"capped":17,"failed":11},[],[93],{"product":94,"cves":95},"niagara_ax_framework",3]