CVE-2016-4525: Advantech Webaccess

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.

Affected products

• Advantech Webaccess: up to and including 8.1

Published 2016-06-25. Last modified 2026-06-17.