Emerson Ams Device Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Emerson Ams Device Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-14804 — CVSS 9.8 (critical): Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution.
• CVE-2015-1008 — CVSS 6.5 (medium): SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed…
• CVE-2018-14808 — CVSS 6.5 (medium): Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected…