Ge Proficy Historian — known CVE vulnerabilities

Every CVE whose affected-product data names Ge Proficy Historian, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-46732 — CVSS 9.8 (critical): Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication…
• CVE-2022-38469 — CVSS 7.5 (high): An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
• CVE-2022-43494 — CVSS 7.5 (high): An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
• CVE-2022-46331 — CVSS 7.5 (high): An unauthorized user could possibly delete any file on the system.
• CVE-2022-46660 — CVSS 7.5 (high): An unauthorized user could alter or write files with full control over the path and content of the file.