彙總 ecava 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 路徑處理缺陷與緩衝區溢位 等問題，部分漏洞可能導致 記憶體損壞，並影響 生產負載與軟體部署 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2017-16735 | A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which generates an error in the database log. | [email protected] | 5.3 | 0.24% | 2017-12-20 | 2026-05-13 |
| CVE-2017-16733 | A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database. | [email protected] | 5.3 | 0.20% | 2017-12-20 | 2026-05-13 |
| CVE-2017-6050 | A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries. | [email protected] | 9.8 | 1.19% | 2017-06-21 | 2026-05-13 |
| CVE-2016-8341 | An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands. | [email protected] | 9.8 | 0.28% | 2017-02-13 | 2026-05-13 |
| CVE-2016-2306 | The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network. | [email protected] | 7.5 | 0.46% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2305 | Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | [email protected] | 6.1 | 0.34% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2304 | Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. | [email protected] | 4.3 | 0.34% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2303 | CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. | [email protected] | 5.3 | 0.33% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2302 | Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. | [email protected] | 5.3 | 0.32% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2301 | SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | [email protected] | 6.3 | 0.11% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2300 | Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. | [email protected] | 6.5 | 0.17% | 2016-04-22 | 2026-05-06 |
| CVE-2016-2299 | SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | [email protected] | 7.3 | 1.30% | 2016-04-22 | 2026-05-06 |
| CVE-2015-0990 | Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory. | [email protected] | 4.4 | 0.06% | 2015-04-03 | 2026-05-06 |
| CVE-2014-2377 | Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag. | [email protected] | 5.0 | 0.49% | 2014-09-15 | 2026-05-06 |
| CVE-2014-2376 | SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | [email protected] | 7.5 | 0.29% | 2014-09-15 | 2026-05-06 |
| CVE-2014-2375 | Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature. | [email protected] | 8.3 | 0.56% | 2014-09-15 | 2026-05-06 |
| CVE-2014-0786 | Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. | [email protected] | 7.5 | 1.87% | 2014-05-01 | 2026-05-06 |
| CVE-2014-0753 | Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory. | [email protected] | 7.8 | 3.12% | 2014-01-21 | 2026-04-29 |
| CVE-2014-0752 | The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL. | [email protected] | 7.5 | 2.56% | 2014-01-09 | 2026-04-29 |
| CVE-2012-4700 | Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document. | [email protected] | 9.3 | 10.85% | 2013-02-08 | 2026-04-29 |