Ilevia EVE X1

Name: Ilevia EVE X1
Brand: Ilevia

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical5high1medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-34513US	critical9.8	7.62% (95th)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34187US	high8.8	3.27% (88th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34184US	critical9.8	2.74% (86th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34186US	critical9.8	0.87% (59th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34185US	high7.5	0.84% (58th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34183US	high7.5	0.70% (53rd)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34518US	high7.5	0.66% (51st)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34517US	high7.5	0.66% (51st)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34512US	medium6.1	0.41% (35th)	—	no fix	2025-10-16	≤ 4.7.18.0

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-532Insertion of Sensitive Information into Log File1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.