Niagara Framework vulnerabilities

9 known vulnerabilities in Niagara Framework from Tridium. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Niagara Framework: Improper Neutralization of Argument Delimiters in a Command

  CVE-2025-3945May 22, 2025Tridium

  Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, bef

• 9.8 Critical severity

  Niagara Framework: Incorrect Permission Assignment for Critical Resource

  CVE-2025-3944May 22, 2025Tridium

  Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Ni

• 7.5 High severity

  Niagara Framework: Use of HTTP Request With Sensitive Query String

  CVE-2025-3943May 22, 2025TridiumEPSS 11.4%

  Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2

• 7.5 High severity

  Niagara Framework: Improper Encoding or Escaping of Output

  CVE-2025-3942May 22, 2025Tridium

  Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.

• 9.8 Critical severity

  Niagara Framework: Use of Incorrectly-Resolved Name or Reference

  CVE-2025-3941May 22, 2025Tridium

  Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1,

• 9.8 Critical severity

  Niagara Framework: Improper Use of Validation Framework

  CVE-2025-3940May 22, 2025Tridium

  Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.

• 9.8 Critical severity

  Niagara Framework: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-3938May 22, 2025Tridium

  Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; N

• 9.8 Critical severity

  Niagara Framework: Use of Password Hash With Insufficient Computational Effort

  CVE-2025-3937May 22, 2025Tridium

  Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2,

• 9.8 Critical severity

  Niagara Framework: Incorrect Permission Assignment for Critical Resource

  CVE-2025-3936May 22, 2025Tridium

  Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Fram