Bentley records
225 published records for vendor bentley.
Researcher profile
- Entered KEV
- 2 · 0.9%
- Weaponized
- 2 · 0.9%
- Pre-auth RCE
- 1
- With a fix record
- 0.9%
- Median publish → KEV
- 1 days
Recurring classes
- CWE-125 Out-of-bounds Read83
- CWE-787 Out-of-bounds Write54
- CWE-416 Use After Free43
- CWE-122 Heap-based Buffer Overflow17
- CWE-121 Stack-based Buffer Overflow12
- CWE-457 Use of Uninitialized Variable7
The weakness classes this vendor ships most often: where to look.
CWEAll records
225 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
100Now | CVE-2021-44228Weaponized | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsapache · log4j · CWE-20 | Critical10.0 | KEV | 99.9% | Dec 10, 2021 |
95Now | CVE-2023-4863Weaponized | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bogoogle · chrome · CWE-787 | High8.8 | KEV | 99.9% | Sep 12, 2023 |
36Monitor | CVE-2024-27455No exploit | In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attemptsCWE-488 | Critical9.1 | — | 0.6% | Feb 26, 2024 |
34Monitor | CVE-2023-51708No exploit | Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configbentley · assetwise alim for transportation · CWE-287 | High8.6 | — | 0.4% | Dec 21, 2023 |
32Monitor | CVE-2021-46575No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-416 | High7.8 | — | 2.3% | Feb 18, 2022 |
32Monitor | CVE-2021-46656No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · microstation · CWE-787 | High7.8 | — | 2.2% | Feb 18, 2022 |
32Monitor | CVE-2021-34908No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-416 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34893No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34896No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34900No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34907No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34905No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-46604No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-787 | High7.8 | — | 2.1% | Feb 18, 2022 |
32Monitor | CVE-2021-46605No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-122 | High7.8 | — | 2.1% | Feb 18, 2022 |
32Monitor | CVE-2021-34917No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-416 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-46582No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-416 | High7.8 | — | 2.1% | Feb 18, 2022 |
32Monitor | CVE-2021-34874No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-119 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34903No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-787 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-46583No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-787 | High7.8 | — | 2.1% | Feb 18, 2022 |
32Monitor | CVE-2021-34897No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-787 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34906No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-416 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34904No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-122 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-34914No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.bentley · bentley view · CWE-787 | High7.8 | — | 2.1% | Jan 13, 2022 |
32Monitor | CVE-2021-46570No exploit | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.0.80.bentley · microstation · CWE-457 | High7.8 | — | 2.1% | Feb 18, 2022 |
32Monitor | CVE-2021-46603No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.bentley · microstation · CWE-122 | High7.8 | — | 2.1% | Feb 18, 2022 |
- CVE-2021-44228100Now
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CriticalCVSS 10.0KEVWeaponizedEPSS 99%apache · log4jDec 10, 2021
- CVE-2023-486395Now
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo
HighCVSS 8.8KEVWeaponizedEPSS 99%google · chromeSep 12, 2023
- CVE-2024-2745536Monitor
In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts
CriticalCVSS 9.1No exploitEPSS 0%Feb 26, 2024
- CVE-2023-5170834Monitor
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view config
HighCVSS 8.6No exploitEPSS 0%bentley · assetwise alim for transportationDec 21, 2023
- CVE-2021-4657532Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-4665632Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-3490832Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3489332Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3489632Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490032Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490732Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490532Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-4660432Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-4660532Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-3491732Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-4658232Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-3487432Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490332Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-4658332Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-3489732Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490632Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3490432Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-3491432Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.
HighCVSS 7.8No exploitEPSS 2%bentley · bentley viewJan 13, 2022
- CVE-2021-4657032Monitor
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022
- CVE-2021-4660332Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.
HighCVSS 7.8No exploitEPSS 2%bentley · microstationFeb 18, 2022