Sign inStart freeBook a demo

Tridium vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Tridium has 20 published vulnerabilities across 11 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Niagara, with 14. If you run Tridium software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Tridium products have the most vulnerabilities?

Niagara leads with 14 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Niagara14
  2. Niagara Enterprise Security12
  3. Niagara Ax6
  4. Niagara Ax Framework3
  5. Jace-80001
  6. Niagara41
  7. Edge 101
  8. Jace 3e1
  9. Jace 6e1
  10. Jace 71
Published vulnerabilities
Known exploited

Which Tridium vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Tridium's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Tridium flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 11%
    CVE-2025-3943Medium

    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection.

    CVSS4.1Published22 May 2025
  2. 6.4%
    CVE-2012-4701Critical

    Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest...

    CVSS9.3Published15 Feb 2013
  3. 6.2%
    CVE-2017-16744High

    A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform...

    CVSS7.2Published20 Aug 2018
  4. 5.3%
    CVE-2017-16748Critical

    An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the...

    CVSS9.8Published20 Aug 2018
  5. 2.5%
    CVE-2012-4027Medium

    Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by...

    CVSS5.0Published16 Jul 2012
  6. 2.2%
    CVE-2012-3024Medium

    Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.

    CVSS5.0Published16 Aug 2012
  7. 1.9%
    CVE-2012-3025Medium

    The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by...

    CVSS5.0Published16 Aug 2012
  8. 1.6%
    CVE-2012-4028High

    Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.

    CVSS7.8Published16 Jul 2012
  9. 1.0%
    CVE-2018-18985Medium

    Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to...

    CVSS5.4Published29 Jan 2019
  10. 0.7%
    CVE-2025-3945High

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters.

    CVSS7.2Published22 May 2025
Every product

All Tridium products we track.

6 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 6 Tridium products with at least one tracked version, of 11 in our catalogue.

Precursor Intelligence

Running Tridium? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 20 published vulnerabilities across 11 products and 31 versions from Tridium.

None of Tridium's vulnerabilities is on the list of flaws known to be exploited today.

Niagara, with 14 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Tridium products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring