Aveva Edge vulnerabilities

• aveva edge AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm CVE-2025-9317 8.3 HighNovember 14, 2025
• aveva edge WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-34376 6.5 MediumMay 6, 2024
• aveva edge, platform common services +1 more AVEVA Edge products Uncontrolled Search Path Element CVE-2023-6132 7.3 HighFebruary 29, 2024
• aveva edge Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and... CVE-2021-42797 7.5 HighDecember 16, 2023
• aveva edge An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions... CVE-2021-42796 9.8 CriticalDecember 16, 2023
• aveva edge An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior.... CVE-2021-42794 5.3 MediumDecember 16, 2023
• aveva application server, batch management, communication drivers pack +19 more +21 more AVEVA Operations Control Logger External Control of File Name or Path CVE-2023-34982 5.5 MediumNovember 15, 2023
• aveva application server, batch management, communication drivers pack +19 more +21 more AVEVA Operations Control Logger Execution with Unnecessary Privileges CVE-2023-33873 7.8 HighNovember 15, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-36970 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2022-36969 EPSS 13.8% 5.5 MediumMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28688 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28687 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28686 7.8 HighMarch 29, 2023
• aveva edge This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-28685 EPSS 17.2% 7.8 HighMarch 29, 2023
• aveva edge, ibm edge application manager +1 more IBM Edge 4.2 could reveal sensitive version information about the server from error pages that... CVE-2020-4941 4.3 MediumSeptember 23, 2021
• aveva edge, ibm edge application manager +1 more IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the... CVE-2020-4809 4.0 MediumSeptember 23, 2021
• aveva edge, ibm edge application manager +1 more IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the... CVE-2020-4805 4.0 MediumSeptember 23, 2021
• aveva edge, ibm edge application manager +1 more IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the... CVE-2020-4803 4.0 MediumSeptember 23, 2021
• aveva edge, ibm edge application manager +1 more IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed... CVE-2020-4792 5.4 MediumApril 5, 2021
• aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 more InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine... CVE-2018-17916 9.8 CriticalNovember 2, 2018
• aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 more InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine... CVE-2018-17914 9.8 CriticalNovember 2, 2018
• aveva edge ChakraCore information disclosure vulnerability CVE-2017-0208 Fix available EPSS 15.3% 4.3 MediumApril 12, 2017
• aveva edge A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in... CVE-2017-0205 EPSS 23.6% 7.5 HighApril 12, 2017
• aveva edge A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in... CVE-2017-0200 EPSS 13.8% 7.5 HighApril 12, 2017
• aveva edge A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting... CVE-2017-0093 EPSS 13.7% 7.5 HighApril 12, 2017
• aveva edge Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in... CVE-2017-0140 EPSS 25.5% 4.2 MediumMarch 17, 2017
• aveva edge Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in... CVE-2017-0135 4.2 MediumMarch 17, 2017
• aveva edge Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka ... CVE-2017-0069 4.3 MediumMarch 17, 2017
• aveva edge Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process... CVE-2017-0068 EPSS 15.3% 4.3 MediumMarch 17, 2017
• aveva edge Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in... CVE-2017-0066 EPSS 26.5% 4.2 MediumMarch 17, 2017
• aveva edge Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a... CVE-2017-0065 Public exploit EPSS 27.6% 4.3 MediumMarch 17, 2017
• aveva edge A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in... CVE-2017-0034 EPSS 12.7% 7.5 HighMarch 17, 2017
• aveva edge The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site... CVE-2017-0017 EPSS 36.4% 6.1 MediumMarch 17, 2017
• aveva edge Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site,... CVE-2017-0011 EPSS 36.8% 4.3 MediumMarch 17, 2017
• aveva edge, schneider-electric wonderware intouch 2014 +1 more Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition... CVE-2015-0999 2.1 LowMarch 29, 2015
• aveva edge, schneider-electric wonderware intouch 2014 +1 more Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition... CVE-2015-0998 3.3 LowMarch 29, 2015
• aveva edge, schneider-electric wonderware intouch 2014 +1 more Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition... CVE-2015-0997 5.0 MediumMarch 29, 2015
• aveva edge, schneider-electric wonderware intouch 2014 +1 more Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition... CVE-2015-0996 2.1 LowMarch 29, 2015