Skip to contentAveva vulnerabilities
Newest
- aveva system platformAVEVA System Platform Cleartext Storage of Sensitive Information in MemoryCVE-2022-08358.1 High
- aveva system platformAVEVA System Platform Missing Authentication for Critical FunctionCVE-2021-330088.8 High
- aveva system platformAVEVA System Platform Path TraversalCVE-2021-329817.2 High
- aveva system platformAVEVA System Platform Origin Validation ErrorCVE-2021-329857.2 High
- aveva system platformAVEVA System Platform Uncaught ExceptionCVE-2021-330107.5 High
- aveva system platformAVEVA System Platform Improper Verification of Cryptographic SignatureCVE-2021-329777.2 High
- aveva pi web apiOSIsoft PI Web APICVE-2021-435496.9 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 could reveal sensitive version information about the server from error pages that...CVE-2020-49414.3 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...CVE-2020-48094.0 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...CVE-2020-48054.0 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the...CVE-2020-48034.0 Medium
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer DereferenceCVE-2021-329877.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Improper Handling of Exceptional ConditionsCVE-2021-329997.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer DereferenceCVE-2021-329797.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer DereferenceCVE-2021-329717.5 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Buffer OverflowCVE-2021-329598.1 High
- aveva suitelink, aveva software, llc batch management 2020, communication drivers pack 2020 +4 more +6 moreAVEVA SuiteLink Server Null Pointer DereferenceCVE-2021-329637.5 High
- aveva intouch, intouch 2017, intouch 2020 +2 moreThe vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all...CVE-2021-329426.6 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...CVE-2020-47925.4 Medium
- aveva edna enterprise data historianAn SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA...CVE-2020-135019.8 Critical
- aveva edna enterprise data historianSQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise...CVE-2020-135009.8 Critical
- aveva edna enterprise data historianAn SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA...CVE-2020-134999.8 Critical
- aveva edna enterprise data historianParameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks....CVE-2020-135059.8 Critical
- aveva edna enterprise data historianParameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection...CVE-2020-135049.8 Critical
- aveva pi data archiveOSIsoft PI SystemCVE-2020-106005.9 Medium
- aveva vijeo citect and citect scada, iec870ip firmware +1 moreThe IEC870IP driver for AVEVA�s Vijeo Citect and Citect SCADA and Schneider Electric�s Power...CVE-2019-135377.5 High
- schneider-electric citectscada, aveva vijeo citect and citectscada, schneider-electric scada expert vijeo citect +2 moreIn Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified...CVE-2019-109817.8 High
- aveva wonderware system platformAVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account...CVE-2019-65258.8 High
- aveva indusoft web studio, ics-cert aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update, aveva intouch machine edition 2014 +2 moreAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly...CVE-2019-6545Public exploitEPSS 13.9%7.5 High
- aveva indusoft web studio, ics-cert aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update, aveva intouch machine edition 2014 +2 moreAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly...CVE-2019-6543Public exploitEPSS 17.3%9.8 Critical
- aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 moreInduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine...CVE-2018-179169.8 Critical
- aveva edge, indusoft web studio, intouch machine edition 2014 +1 more +3 moreInduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine...CVE-2018-179149.8 Critical
- aveva intouch, intouch 2014, intouch 2017 +2 moreAVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update...CVE-2018-106289.8 Critical
- aveva indusoft web studio, aveva software, llc intouch machine edition, aveva intouch machine 2017 +2 moreAVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1...CVE-2018-106209.8 Critical
- aveva clearscadaIn Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and...CVE-2017-60217.5 High
- aveva clearscadaSchneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a...CVE-2017-99627.5 High
- aveva wonderware intouch access anywhereAn Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch...CVE-2017-51605.3 Medium
- aveva wonderware intouch access anywhereAn Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access...CVE-2017-51589.8 Critical
- aveva wonderware intouch access anywhereA Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access...CVE-2017-51568.8 High
- aveva edgeChakraCore information disclosure vulnerabilityCVE-2017-0208Fix availableEPSS 15.3%4.3 Medium
- aveva edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...CVE-2017-0205EPSS 23.6%7.5 High
- aveva edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...CVE-2017-0200EPSS 13.8%7.5 High
- aveva edgeA remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting...CVE-2017-0093EPSS 13.7%7.5 High
- aveva edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in...CVE-2017-0140EPSS 25.5%4.2 Medium
- aveva edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in...CVE-2017-01354.2 Medium
- aveva edgeMicrosoft Edge allows remote attackers to spoof web content via a crafted web site, aka ...CVE-2017-00694.3 Medium
- aveva edgeBrowsers in Microsoft Edge allow remote attackers to obtain sensitive information from process...CVE-2017-0068EPSS 15.3%4.3 Medium
- aveva edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in...CVE-2017-0066EPSS 26.5%4.2 Medium
- aveva edgeMicrosoft Edge allows remote attackers to obtain sensitive information from process memory via a...CVE-2017-0065Public exploitEPSS 27.6%4.3 Medium
- aveva edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...CVE-2017-0034EPSS 12.7%7.5 High
- Show moreLoading…