{"id":"CVE-2025-4417","aliases":["EUVD-2025-18216","GHSA-xm3f-qg9m-jmh5"],"status":"published","title":"AVEVA PI Connector for CygNet Cross-site Scripting","description":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14 and prior that, if exploited, could allow an \nadministrator miscreant with local access to the connector admin portal \nto persist arbitrary JavaScript code that will be executed by other \nusers who visit affected pages.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00155,"percentile":0.04737,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-06-12T19:32:32Z","modified":"2026-06-17T09:33:12Z","products":[{"vendor":"aveva","product":"pi connector for cygnet"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-09"},{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4417"},{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates"},{"url":"https://github.com/advisories/GHSA-xm3f-qg9m-jmh5"}],"sources":{"cve":[{"id":"CVE-2025-4417","title":"AVEVA PI Connector for CygNet Cross-site Scripting","description":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14 and prior that, if exploited, could allow an \nadministrator miscreant with local access to the connector admin portal \nto persist arbitrary JavaScript code that will be executed by other \nusers who visit affected pages.","status":"published","published":"2025-06-12T19:32:32.628Z","modified":"2025-06-12T19:57:09.559Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:48.853452Z"}],"euvd":[{"id":"EUVD-2025-18216","description":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14 and prior that, if exploited, could allow an \nadministrator miscreant with local access to the connector admin portal \nto persist arbitrary JavaScript code that will be executed by other \nusers who visit affected pages.","status":"published","published":"2025-06-12T19:32:32Z","modified":"2025-06-12T19:57:09Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:32:24.065864Z"}],"ghsa":[{"id":"GHSA-xm3f-qg9m-jmh5","title":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14...","description":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14 and prior that, if exploited, could allow an \nadministrator miscreant with local access to the connector admin portal \nto persist arbitrary JavaScript code that will be executed by other \nusers who visit affected pages.","status":"published","published":"2025-06-12T21:30:31Z","modified":"2025-06-12T21:30:37Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:02:42.831943Z"}],"nvd":[{"id":"CVE-2025-4417","description":"A cross-site scripting vulnerability exists in \nAVEVA PI Connector for CygNet \nVersions 1.6.14 and prior that, if exploited, could allow an \nadministrator miscreant with local access to the connector admin portal \nto persist arbitrary JavaScript code that will be executed by other \nusers who visit affected pages.","status":"published","published":"2025-06-12T20:15:21.76Z","modified":"2026-06-17T09:33:12.73Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:11:11.789448Z"}]}}