inductiveautomation ignition

Name: inductiveautomation ignition
Brand: inductiveautomation

productUS

cpe:2.3:a:inductiveautomation:ignition:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

6critical20high8medium1low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-39475US	critical9.8	64.1% (99th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-39473US	high8.8	62.5% (99th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2022-35869US	critical9.8OT high	59.9% (99th)	—	no fix	2022-07-25	= 8.1.15
CVE-2023-38124US	high8.8	59.6% (99th)	—	8.1.26	2024-05-03	< 8.1.26
CVE-2023-50218US	high8.8	55.0% (99th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-50223US	high8.8	54.9% (99th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2022-35870US	high7.8	44.3% (99th)	—	no fix	2022-07-25	= 8.1.15
CVE-2022-35871US	high7.8OT high	41.0% (99th)	—	no fix	2022-07-25	= 8.1.15
CVE-2022-36126US	high7.2OT elevated	2.68% (86th)	—	7.9.20	2022-07-16	2 versions
CVE-2015-0993US	medium6.4	2.25% (83rd)	—	no fix	2015-04-03	= 7.7.2
CVE-2023-39476US	critical9.8	2.23% (83rd)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-50233US	high8.8	2.08% (81st)	—	8.1.33	2024-05-03	8.1.0 → 8.1.33
CVE-2022-35890US	critical9.8OT elevated	1.97% (80th)	—	7.9.20	2022-07-15	2 versions
CVE-2023-38122US	high7.2	1.88% (79th)	—	8.1.26	2024-05-03	< 8.1.26
CVE-2023-50220US	high8.8	1.85% (79th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-39477US	high7.5	1.54% (75th)	—	8.1.33	2024-05-03	8.1.0 → 8.1.33
CVE-2023-50219US	high8.8	1.50% (74th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-50232US	high8.8	1.39% (72nd)	—	8.1.33	2024-05-03	8.1.0 → 8.1.33
CVE-2015-0991US	medium5.0	1.33% (71st)	—	no fix	2015-04-03	= 7.7.2
CVE-2023-39472US	medium6.5	1.32% (71st)	—	8.1.32	2024-05-03	8.1.0 → 8.1.32
CVE-2015-0994US	medium4.0	1.31% (71st)	—	no fix	2015-04-03	= 7.7.2
CVE-2023-38121US	critical9.0	1.24% (69th)	—	8.1.26	2024-05-03	< 8.1.26
CVE-2023-38123US	high8.8OT elevated	1.17% (67th)	—	8.1.26	2024-05-03	< 8.1.26
CVE-2023-50222US	high8.8	1.15% (67th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2023-50221US	high8.8	1.15% (67th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2015-0976US	medium4.3	1.12% (66th)	—	no fix	2015-04-03	= 7.7.2
CVE-2015-0995US	medium5.0	1.12% (66th)	—	no fix	2015-04-03	= 7.7.2
CVE-2022-1704US	critical9.8	1.03% (64th)	—	8.1.8	2022-08-05	2 versions
CVE-2022-1264US	high8.8	0.97% (62nd)	—	8.1.10	2022-07-20	8.0.4 → 8.1.10
CVE-2020-14479US	medium5.3OT elevated	0.89% (59th)	—	7.9.14	2022-04-01	2 versions
CVE-2022-35873US	high7.8	0.71% (53rd)	—	no fix	2022-07-25	= 8.1.15
CVE-2022-35872US	high7.8	0.70% (53rd)	—	no fix	2022-07-25	= 8.1.15
CVE-2023-39474US	high8.8OT elevated	0.62% (49th)	—	8.1.35	2024-05-03	8.1.0 → 8.1.35
CVE-2025-13913US	medium6.8	0.36% (30th)	—	8.3.0	2026-03-12	< 8.3.0
CVE-2015-0992US	low2.1	0.33% (27th)	—	no fix	2015-04-03	= 7.7.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data12 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-254CWE-2542 CVEs
CWE-287Improper Authentication2 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan