Milestone: CVE Program partner

CVEs, 365 days25 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Milestone
Role	Not in the current partner list
Type	-
Reports to	-
Scope	-

CVE-2026-3014 2026-07-14 · CVSS 6.4
Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulne
CVE-2025-0836 2025-12-16 · CVSS 5.3
Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to
CVE-2025-1688 2025-04-15 · CVSS 5.5
Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from old
CVE-2024-12569 2024-12-19 · CVSS 5.2
Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials
CVE-2024-3506 2024-10-08 · CVSS 7.3
A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on R

Milestone