CVE-2026-1698

>= 15.0.0 and <= 15.2.13

A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3

6.1MEDIUM

CVE-2026-1697

>= 12.0.0 and <= 15.2.13

The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 t

6.5MEDIUM

CVE-2026-1696

>= 12.0.0 and <= 15.2.13

Some HTTP security headers are not properly set by the web server when sending responses to the client application.

6.1MEDIUM

CVE-2026-1695

>= 12.0.0 and <= 15.2.13

An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in ve

6.1MEDIUM

CVE-2026-1694

>= 12.0.0 and <= 15.2.13

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webserv

4.3MEDIUM

CVE-2026-1693

>= 12.0.0 and <= 15.2.13

The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebSche

7.5HIGH

CVE-2026-1692

>= 12.0.0 and <= 15.2.13

A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, T

6.1MEDIUM

CVE-2022-4312

>= 8.10 and <= 15.2.3

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unaut

5.5MEDIUM

CVE-2022-4311

>= 15 and <= 15.2.2

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a u

4.7MEDIUM

CVE-2022-2569

< 12.0.27

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored

5.5MEDIUM

CVE-2020-26869

>= 8.10 and < 12.0.17

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access sessi

7.5HIGH

CVE-2020-26868

>= 8.10 and < 12.0.17

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized

7.5HIGH

CVE-2020-26867

>= 8.10 and < 12.0.17

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an att

9.8CRITICAL

CVE-2011-4045

all versions

Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVu

CVE-2011-4044

all versions

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote att

CVE-2011-4043

all versions

Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantV

CVE-2011-4042

all versions

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote att