AssetView vulnerabilities

3 known vulnerabilities in AssetView from Hammock. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  AssetView: Incorrect Permission Assignment for Critical Resource

  CVE-2026-101020Oct 13, 2026Hammock

  An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Clie

• 8.2 High severity

  AssetView: Missing Authentication for Critical Functionality

  CVE-2025-25060Apr 2, 2025Hammock

  Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

• 9.8 Critical severity

  AssetView: Missing Authentication for Critical Functionality

  CVE-2022-28719Apr 28, 2022HammockEPSS 4.68%

  Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the manage