[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWtn0AkcFqGssRSfUR4_Nfv5CMbxPfrLPiyHVt4YxYfk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":62,"kevVulnerabilities":121,"topProductsByCves":122,"seoMetadata":133,"meta":142},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":61},32534,"tridium",11,20,0,31,"2025-05-22","t",[16,21,26,32,38,42,45,48,51,54,57],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},165444,"niagara",13,14,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},165448,"niagara_enterprise_security",7,12,{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},165446,"niagara_ax",4,6,"2019-09-24",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},165447,"niagara_ax_framework",2,3,"2019-01-29",{"id":39,"product_name":40,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},165443,"jace-8000",1,{"id":43,"product_name":44,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":31},165445,"niagara4",{"id":46,"product_name":47,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},165439,"edge_10",{"id":49,"product_name":50,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},165440,"jace_3e",{"id":52,"product_name":53,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},165441,"jace_6e",{"id":55,"product_name":56,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},165442,"jace_7",{"id":58,"product_name":59,"version_count":36,"cve_count":11,"kev_count":11,"last_cve_update":60},165449,"niagra_ax_framework",null,"Tridium is a technology vendor with 11 tracked products and 20 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[63,71,79,87,92,98,103,107,112,117],{"cveId":64,"description":65,"publishedDate":13,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":69,"epssScore":70},"CVE-2025-3943","Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",4.1,"v3.1","Medium",false,0.10679,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":69,"epssScore":78},"CVE-2012-4701","Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.","2013-02-15",9.3,"v2","Critical",0.06419,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":85,"isKev":69,"epssScore":86},"CVE-2017-16744","A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.","2018-08-20",7.2,"v3.0","High",0.0622,{"cveId":88,"description":89,"publishedDate":82,"cvssScore":90,"cvssVersion":84,"severity":77,"isKev":69,"epssScore":91},"CVE-2017-16748","An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.",9.8,0.05286,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":76,"severity":68,"isKev":69,"epssScore":97},"CVE-2012-4027","Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.","2012-07-16",5,0.02542,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":96,"cvssVersion":76,"severity":68,"isKev":69,"epssScore":102},"CVE-2012-3024","Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.","2012-08-16",0.02198,{"cveId":104,"description":105,"publishedDate":101,"cvssScore":96,"cvssVersion":76,"severity":68,"isKev":69,"epssScore":106},"CVE-2012-3025","The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.",0.01925,{"cveId":108,"description":109,"publishedDate":95,"cvssScore":110,"cvssVersion":76,"severity":85,"isKev":69,"epssScore":111},"CVE-2012-4028","Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.",7.8,0.01626,{"cveId":113,"description":114,"publishedDate":37,"cvssScore":115,"cvssVersion":84,"severity":68,"isKev":69,"epssScore":116},"CVE-2018-18985","Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.",5.4,0.00973,{"cveId":118,"description":119,"publishedDate":13,"cvssScore":83,"cvssVersion":67,"severity":85,"isKev":69,"epssScore":120},"CVE-2025-3945","Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.",0.00651,[],[123,124,125,126,127,128,129,130,131,132],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},{"id":43,"product_name":44,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":31},{"id":46,"product_name":47,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},{"id":49,"product_name":50,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},{"id":52,"product_name":53,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},{"id":55,"product_name":56,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":31},{"title":134,"metaDescription":135,"keywords":136,"structuredData":137},"Tridium - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tridium covering 11 products with 20 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tridium vulnerabilities, Tridium security, Tridium CVE, Tridium threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":138,"@type":139,"name":140,"description":135,"url":141},"https:\u002F\u002Fschema.org","Organization","Tridium","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftridium",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":143,"apiVersion":144},"2026-10-19T02:49:21.455Z","3.0"]