Aveva vulnerabilities

Products

• Edge 33
• Edge 11
• Clearscada 9
• System Platform 9
• Process Optimization 7
• Process Optimization 7
• System Platform 6
• Suitelink 6
• Application Server 5
• Edna Enterprise Data Historian 5
• Indusoft Web Studio 5
• Intouch 5
• Historian 4
• Intouch Machine Edition 2014 4
• Pipeline Integrity Monitor 4
• Pi Server 4
• Batch Management 3
• Batch Management 3
• Communication Drivers Pack 3
• Manufacturing Execution System 3
• Mobile Operator 3
• Pi Data Archive 3
• Pi Web Api 3
• Telemetry Server 3
• Wonderware Intouch Access Anywhere 3
• Work Tasks 3
• Communication Drivers 2
• Edge (formerly Known As Indusoft Web Studio) 2
• Enterprise Licensing 2
• Enterprise Licensing (formerly Known As License Manager) 2
• Intouch 2017 2
• Intouch Access Anywhere 2
• Manufacturing Execution System (formerly Known As Wonderware Mes) 2
• Mobile Operator (formerly Known As Intelatrac Mobile Operator Rounds) 2
• Pi Connector For Cygnet 2
• Pi Integrator 2
• Pi Server 2
• Plant Scada 2
• Plant Scada (formerly Known As Citect) 2
• Platform Common Services 2

Show 6 moreShow less

• Recipe Management 2
• Recipe Management 2
• Reports For Operations 2023 2
• Systemplatform 2
• Telemetry Server 2
• Worktasks (formerly Known As Workflow Management) 2

Newest

• aveva pipeline integrity monitor AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key CVE-2026-81821 8.3 HighSeptember 8, 2026
• aveva pipeline integrity monitor AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm CVE-2026-81822 8.3 HighSeptember 8, 2026
• aveva pipeline integrity monitor AVEVA Pipeline Integrity Monitor Missing Authorization CVE-2026-81823 6.9 MediumSeptember 8, 2026
• aveva pipeline integrity monitor AVEVA Pipeline Integrity Monitor cross-site scripting CVE-2026-81824 6.3 MediumSeptember 8, 2026
• aveva enterprise scada, enterprise scada hmi, pipeline integrity monitor (delivered on pipeline simulation media) +3 more +5 more AVEVA Enterprise SCADA Deserialization of Untrusted Data CVE-2025-7639 6.1 MediumAugust 14, 2026
• aveva pipeline simulation 2025 AVEVA Pipeline Simulation Missing Authorization CVE-2026-5387 9.3 CriticalApril 15, 2026
• aveva pi data archive pi server Uncaught Exception vulnerability in AVEVA PI Data Archive CVE-2026-1507 8.7 HighFebruary 10, 2026
• aveva pi to connect agent Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent CVE-2026-1495 5.7 MediumFebruary 10, 2026
• aveva process optimization AVEVA Process Optimization Cleartext Transmission of Sensitive Information CVE-2025-64769 7.6 HighJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization Use of Potentially Dangerous Function CVE-2025-65117 8.5 HighJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization Missing Authorization CVE-2025-64729 8.6 HighJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization Uncontrolled Search Path Element CVE-2025-65118 9.3 CriticalJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization SQL Injection CVE-2025-61943 9.3 CriticalJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization Code Injection CVE-2025-64691 9.3 CriticalJanuary 16, 2026
• aveva process optimization AVEVA Process Optimization Code Injection CVE-2025-61937 10.0 CriticalJanuary 16, 2026
• aveva application server AVEVA Application Server IDE Basic Cross-site Scripting CVE-2025-8386 7.2 HighNovember 14, 2025
• aveva edge AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm CVE-2025-9317 8.3 HighNovember 14, 2025
• aveva pi integrator AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type CVE-2025-54460 7.1 HighAugust 21, 2025
• aveva pi integrator AVEVA PI Integrator Insertion of Sensitive Information into Sent Data CVE-2025-41415 7.1 HighAugust 21, 2025
• aveva pi data archive, pi server +1 more AVEVA PI Data Archive Uncaught Exception CVE-2025-36539 7.1 HighJune 12, 2025
• aveva pi data archive, pi server +1 more AVEVA PI Data Archive Uncaught Exception CVE-2025-44019 7.1 HighJune 12, 2025
• aveva pi web api AVEVA PI Web API Cross-site Scripting CVE-2025-2745 4.5 MediumJune 12, 2025
• aveva pi connector for cygnet AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value CVE-2025-4418 6.7 MediumJune 12, 2025
• aveva pi connector for cygnet AVEVA PI Connector for CygNet Cross-site Scripting CVE-2025-4417 6.9 MediumJune 12, 2025
• aveva historian, historian web server +1 more SQL Injection vulnerability in AVEVA Historian Server CVE-2024-6456 8.5 HighAugust 15, 2024
• aveva reports for operations 2023, ocean data systems dream report 2023 +1 more Incorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report CVE-2024-6619 8.5 HighAugust 13, 2024
• aveva reports for operations, reports for operations 2023, ocean data systems dream report 2023 +2 more Path Traversal in Ocean Data Systems Dream Report CVE-2024-6618 8.5 HighAugust 13, 2024
• aveva suitelink server, application server, batch management +3 more +5 more Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server CVE-2024-7113 8.7 HighAugust 13, 2024
• aveva pi web api Deserialization of Untrusted Data in AVEVA PI Web API CVE-2024-3468 8.4 HighJune 12, 2024
• aveva pi asset framework client Deserialization of Untrusted Data in AVEVA PI Asset Framework Client CVE-2024-3467 7.0 HighJune 12, 2024
• aveva edge WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-34376 6.5 MediumMay 6, 2024
• aveva edge, platform common services +1 more AVEVA Edge products Uncontrolled Search Path Element CVE-2023-6132 7.3 HighFebruary 29, 2024
• aveva pi server Improper Check or Handling of Exceptional Conditions in Aveva PI Server CVE-2023-34348 7.5 HighJanuary 18, 2024
• aveva pi server Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server CVE-2023-31274 5.3 MediumJanuary 18, 2024
• aveva edge Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and... CVE-2021-42797 7.5 HighDecember 16, 2023
• aveva edge An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions... CVE-2021-42796 9.8 CriticalDecember 16, 2023
• aveva edge An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior.... CVE-2021-42794 5.3 MediumDecember 16, 2023
• aveva application server, batch management, communication drivers pack +19 more +21 more AVEVA Operations Control Logger External Control of File Name or Path CVE-2023-34982 5.5 MediumNovember 15, 2023
• aveva application server, batch management, communication drivers pack +19 more +21 more AVEVA Operations Control Logger Execution with Unnecessary Privileges CVE-2023-33873 7.8 HighNovember 15, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-36970 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2022-36969 EPSS 13.8% 5.5 MediumMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28688 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28687 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28686 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28685 EPSS 17.2% 7.8 HighMarch 29, 2023
• aveva plant scada, telemetry server +1 more CVE-2023-1256 CVE-2023-1256 9.8 CriticalMarch 16, 2023
• aveva application server SiteFusion Application Server Extension getextension.php path traversal CVE-2016-15023 3.5 LowJanuary 31, 2023
• aveva intouch access anywhere AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal... CVE-2022-23854 Public exploit EPSS 49.7% 7.5 HighDecember 23, 2022
• aveva platform common services (pcs) portal, platform common services, batch management +5 more +7 more AVEVA PCS Portal Uncontrolled Search Path Element CVE-2021-38410 7.3 HighJuly 27, 2022
• aveva intouch access anywhere, plant scada access anywhere +1 more AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere CVE-2022-1467 7.4 HighMay 23, 2022
• Show olderLoading…