arcinfo records

19 published records for vendor arcinfo.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 5.3%
Pre-auth RCE: 3
With a fix record: 10.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

19 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2011-4044Weaponized	An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to arcinfo · frontvue Pre-auth	Medium5.8	—	26.6%	Apr 2, 2012
40Plan	CVE-2020-26867No exploit	ARC Informatique PcVue Deserialization of Untrusted Dataarcinfo · pcvue · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	3.7%	Oct 12, 2020
39Monitor	CVE-2011-4043Proof of concept	Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows arcinfo · frontvue · CWE-189 pre-auth RCE	Critical9.3	—	7.4%	Apr 2, 2012
39Monitor	CVE-2011-4042Proof of concept	An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to arcinfo · frontvue pre-auth RCE	Critical9.3	—	6.4%	Apr 2, 2012
33Monitor	CVE-2026-14868No exploit	Weak encryption mechanism for User directoryarcinfo · pcvue · CWE-326 Local privilege escalation Weak crypto	High8.4	—	0.0%	Jul 7, 2026
31Monitor	CVE-2020-26868No exploit	ARC Informatique PcVue Access to Critical Private Variable via Public Methodarcinfo · pcvue · CWE-767 Pre-auth Denial of service	High7.5	—	2.1%	Oct 12, 2020
31Monitor	CVE-2020-26869No exploit	ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actorarcinfo · pcvue · CWE-200 Pre-auth Info leak	High7.5	—	1.6%	Oct 12, 2020
27Monitor	CVE-2026-14867No exploit	Insecure password storage in User directoryarcinfo · pcvue · CWE-256	Medium6.8	—	0.1%	Jul 7, 2026
26Monitor	CVE-2022-4311No exploit	An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2.arcinfo · pcvue · CWE-532 Info leak	Medium6.5	—	0.3%	Dec 12, 2022
22Monitor	CVE-2022-2569No exploit	ARC Informatique PcVuearcinfo · pcvue · CWE-312	Medium5.5	—	0.1%	Aug 24, 2022
22Monitor	CVE-2022-4312No exploit	A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3.arcinfo · pcvue · CWE-312	Medium5.5	—	0.1%	Dec 12, 2022
21Monitor	CVE-2026-1693No exploit	Use of vulnerable Resource Owner Password Credentials flowarcinfo · pcvue · CWE-477 Pre-auth	Medium5.3	—	0.3%	Feb 26, 2026
21Monitor	CVE-2026-1698No exploit	HTTP Host header vulnerability in WebClient and WebScheduler web appsarcinfo · pcvue · CWE-644 Pre-auth	Medium5.3	—	0.2%	Feb 26, 2026
21Monitor	CVE-2026-1695No exploit	XSS vulnerability upon unsuccessful authenticationarcinfo · pcvue · CWE-79 Pre-auth XSS	Medium5.3	—	0.2%	Feb 26, 2026
21Monitor	CVE-2026-1697No exploit	Use of unsecure cookies for GraphicalData web service and WebClient web apparcinfo · pcvue · CWE-614 Pre-auth	Medium5.3	—	0.1%	Feb 26, 2026
21Monitor	CVE-2026-1692No exploit	Missing origin validation in GraphicalData web service requestsarcinfo · pcvue · CWE-1385 Pre-auth	Medium5.3	—	0.1%	Feb 26, 2026
18Monitor	CVE-2011-4045Proof of concept	Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows rarcinfo · frontvue · CWE-119 Pre-auth Memory safety Denial of service	Medium4.3	—	3.6%	Apr 2, 2012
9Monitor	CVE-2026-1694No exploit	Server configuration details in HTTP headersarcinfo · pcvue · CWE-201 Pre-auth	Low2.3	—	0.1%	Feb 26, 2026
9Monitor	CVE-2026-1696No exploit	Missing security HTTP headersarcinfo · pcvue · CWE-79 Pre-auth XSS	Low2.3	—	0.1%	Feb 26, 2026

CVE-2011-4044
40Plan
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to
MediumCVSS 5.8WeaponizedEPSS 26%
- Pre-auth
arcinfo · frontvueApr 2, 2012
CVE-2020-26867
40Plan
ARC Informatique PcVue Deserialization of Untrusted Data
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Deserialization
arcinfo · pcvueOct 12, 2020
CVE-2011-4043
39Monitor
Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows
CriticalCVSS 9.3Proof of conceptEPSS 7%
- pre-auth RCE
arcinfo · frontvueApr 2, 2012
CVE-2011-4042
39Monitor
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to
CriticalCVSS 9.3Proof of conceptEPSS 6%
- pre-auth RCE
arcinfo · frontvueApr 2, 2012
CVE-2026-14868
33Monitor
Weak encryption mechanism for User directory
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Weak crypto
arcinfo · pcvueJul 7, 2026
CVE-2020-26868
31Monitor
ARC Informatique PcVue Access to Critical Private Variable via Public Method
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
arcinfo · pcvueOct 12, 2020
CVE-2020-26869
31Monitor
ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
arcinfo · pcvueOct 12, 2020
CVE-2026-14867
27Monitor
Insecure password storage in User directory
MediumCVSS 6.8No exploitEPSS 0%
arcinfo · pcvueJul 7, 2026
CVE-2022-4311
26Monitor
An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2.
MediumCVSS 6.5No exploitEPSS 0%
- Info leak
arcinfo · pcvueDec 12, 2022
CVE-2022-2569
22Monitor
ARC Informatique PcVue
MediumCVSS 5.5No exploitEPSS 0%
arcinfo · pcvueAug 24, 2022
CVE-2022-4312
22Monitor
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3.
MediumCVSS 5.5No exploitEPSS 0%
arcinfo · pcvueDec 12, 2022
CVE-2026-1693
21Monitor
Use of vulnerable Resource Owner Password Credentials flow
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
arcinfo · pcvueFeb 26, 2026
CVE-2026-1698
21Monitor
HTTP Host header vulnerability in WebClient and WebScheduler web apps
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
arcinfo · pcvueFeb 26, 2026
CVE-2026-1695
21Monitor
XSS vulnerability upon unsuccessful authentication
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
arcinfo · pcvueFeb 26, 2026
CVE-2026-1697
21Monitor
Use of unsecure cookies for GraphicalData web service and WebClient web app
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
arcinfo · pcvueFeb 26, 2026
CVE-2026-1692
21Monitor
Missing origin validation in GraphicalData web service requests
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
arcinfo · pcvueFeb 26, 2026
CVE-2011-4045
18Monitor
Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows r
MediumCVSS 4.3Proof of conceptEPSS 3%
arcinfo · frontvueApr 2, 2012
CVE-2026-1694
9Monitor
Server configuration details in HTTP headers
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
arcinfo · pcvueFeb 26, 2026
CVE-2026-1696
9Monitor
Missing security HTTP headers
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
- XSS
arcinfo · pcvueFeb 26, 2026