Medium severity4.1NVD Advisory· Published May 22, 2025· Updated Jun 17, 2026
CVE-2025-3943
CVE-2025-3943
Description
Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<4.14.2, <4.15.1, <4.10.11+ 1 more
- (no CPE)range: <4.14.2, <4.15.1, <4.10.11
- (no CPE)range: 0
<4.14.2, <4.15.1, <4.10.11+ 1 more
- (no CPE)range: <4.14.2, <4.15.1, <4.10.11
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- honeywell.com/us/en/product-securitynvdVendor Advisory
- docs.niagara-community.com/category/tech_bullnvdPermissions Required
News mentions
0No linked articles in our index yet.