Ge Proficy Historian vulnerabilities

5 CVEs affecting Ge Proficy Historian, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-46732, published 2023-01-18.

More from Ge.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-46732, published 2023-01-18. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
• CVE-2022-38469, published 2023-01-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
• CVE-2022-46660, published 2023-01-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. An unauthorized user could alter or write files with full control over the path and content of the file.
• CVE-2022-43494, published 2023-01-18. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
• CVE-2022-46331, published 2023-01-18. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthorized user could possibly delete any file on the system.