ABB vendor intelligence

ABB Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting ABB products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
4
Known exploited vulnerabilities affecting ABB products
In CISA KEV
2
Records also listed in the official catalog
Beyond CISA KEV
2
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
ABB KEVs with sensor-observed exploitation activity

The catalog gap matters for ABB exposure

Two of the four exploited ABB vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss half of this vendor portfolio.

50%
Covered by CISA
50%
Beyond CISA
3
Product families

Attested ABB vulnerabilities

4 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.

Food Delivery Script High Beyond CISA 26 Jan 2026
CVE-2022-23134

Possible view of the setup pages by unauthenticated users if config file already exists

Frontend Confirmed In CISA 22 Feb 2022
CVE-2022-23131

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

Frontend Confirmed In CISA 22 Feb 2022
CVE-2024-6298

remote code execution

ASPECT-Enterprise, NEXUS Series, MATRIX Series High Beyond CISA 05 Jul 2024

Showing 4 of 4 on this page (4 ABB known exploited vulnerabilities).

Recurring weakness patterns

Validation, access control, and authentication account for three mapped occurrences across this ABB KEV portfolio.

Browse all KEVs →