Bentley Systems — Vulnerabilities & Security Advisories 3

Bentley Systems develops infrastructure engineering software for designing, constructing, and operating transportation, building, and utility projects. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and insecure default configurations. While no major public security incidents have been widely reported, the company maintains a moderate CVE count with three active records. Their security posture typically involves regular patch releases and vulnerability disclosure programs, though legacy products may exhibit weaker security controls compared to newer offerings.