Common Vulnerability Exposure Program
Bentley is enacting a Common Vulnerability Exposure (CVE) program. Bentley strives to publish important security advisories that help our users mitigate risks for a subset of our desktop products. These advisory pages are Bentley’s source of information to our user community for potential risks in our products. Although we generally recommend updating to the latest product versions, some advisories include more detailed information about risk mitigation and specifics of affected versions which should be reviewed before updating. Our advisories are often linked with CVE entries. This process, the information in the advisories, and the website are all subject to change.
1 - 12 of 45 posts
BE-2025-0003
Database processing vulnerability in MicroStation via SQLite dependency.
Publication Date: 2025-08-21
BE-2025-0002
XML parsing vulnerability in MicroStation via libexpat dependency.
Publication Date: 2025-08-21
BE-2025-0001
Certificate validation vulnerability in MicroStation via libcurl dependency.
Publication Date: 2025-08-21
BE-2023-0002
Assetwise Integrity Information Server information disclosure
Publication Date: 2023-11-21
BE-2023-0001
Seequent LeapFrog WebP Heap-Based Buffer Overflow Vulnerability
Publication Date: 2023-10-27
BE-2022-0020
DGN File Parsing Out-of-bounds Read and Stack Overflow Vulnerabilities in MicroStation and MicroStation-based applications
Publication Date: 2022-10-20
BE-2022-0019
FBX File Parsing Out-of-bounds Read Vulnerabilities and Head Overflow in MicroStation and MicroStation-based applications
Publication Date: 2022-10-12