ABB
Number 78 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
227
Critical
41
High
98
Known Exploited
0
Exploit available
0
Network, no login needed
32.9%
Of 222 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 21 | 1 | 10 | 10 | 0 | 0 |
| 2025 | 68 | 11 | 28 | 28 | 1 | 0 |
| 2024 | 36 | 16 | 16 | 4 | 0 | 0 |
| 2023 | 21 | 1 | 11 | 8 | 1 | 0 |
| 2022 | 18 | 1 | 12 | 5 | 0 | 0 |
| 2021 | 7 | 2 | 2 | 3 | 0 | 0 |
| 2020 | 47 | 9 | 17 | 18 | 2 | 1 |
| 2019 | 7 | 0 | 2 | 2 | 1 | 2 |
| 2018 | 2 | 0 | 0 | 0 | 0 | 2 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| ASPECT-Enterprise | 58 | 42 |
| eSOMS | 13 | 1 |
| ABB Ability™ Symphony® Plus Operations | 9 | 9 |
| FLXEON | 7 | 7 |
| Central Licensing System | 5 | 3 |
| ABB Ability™ zenon | 4 | 2 |
| Drive Composer entry | 4 | 4 |
| RMC-100 | 4 | 2 |
| T-MAC Plus | 4 | 4 |
| TG/S 3.2 Telephone Gateway | 4 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Authentication Issues | 17 | 13 |
| Improper Input Validation | 10 | 4 |
| Permissions, Privileges, and Access Controls | 9 | 5 |
| Cross-Site Scripting | 8 | 4 |
| Incorrect Permission Assignment for Critical Resource | 8 | 5 |
| Code Injection | 7 | 7 |
| Configuration | 7 | 0 |
| Memory Corruption | 7 | 1 |
| Improper Validation of Specified Type of Input | 6 | 6 |
| Information Disclosure | 6 | 3 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-13599 | ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB | High | 0.1% | |
| CVE-2026-17525 | My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion | Medium | 0.1% | |
| CVE-2026-15953 | Path Traversal During Project Archive Import | Medium | 0.1% | |
| CVE-2026-15952 | Improper Permission Assignment in Scheduler Service | Medium | 0.1% | |
| CVE-2026-19438 | Mint Workbench I Path traversal Vulnerability | High | 0.4% | |
| CVE-2023-5778 | Missing Length Check | High | 0.5% | |
| CVE-2026-12705 | Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool | Medium | 0.2% | |
| CVE-2025-13162 | Advant Master Online Builder DLL vulnerability | Medium | 0.1% | |
| CVE-2025-7064 | Freelance Security Lock – Access to Windows OS | Medium | 0.1% | |
| CVE-2025-14774 | Communication analysis between the Card Reader and TP2CardReaderService daemon | High | 0.2% |