Aveva vulnerabilities
55 CVEs and advisories name Aveva as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-81821AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
- CVE-2026-81822AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
- CVE-2026-81823AVEVA Pipeline Integrity Monitor Missing Authorization
- CVE-2026-81824AVEVA Pipeline Integrity Monitor cross-site scripting
- CVE-2025-7639AVEVA Enterprise SCADA Deserialization of Untrusted Data
- CVE-2026-5387AVEVA Pipeline Simulation Missing Authorization
- CVE-2026-1507Uncaught Exception vulnerability in AVEVA PI Data Archive
- CVE-2026-1495Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
- CVE-2025-64769AVEVA Process Optimization Cleartext Transmission of Sensitive Information
- CVE-2025-65117AVEVA Process Optimization Use of Potentially Dangerous Function
- CVE-2025-64729AVEVA Process Optimization Missing Authorization
- CVE-2025-65118AVEVA Process Optimization Uncontrolled Search Path Element
- CVE-2025-61943AVEVA Process Optimization SQL Injection
- CVE-2025-64691AVEVA Process Optimization Code Injection
- CVE-2025-61937AVEVA Process Optimization Code Injection
- CVE-2025-8386AVEVA Application Server IDE Basic Cross-site Scripting
- CVE-2025-9317AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm
- CVE-2025-54460AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type
- CVE-2025-41415AVEVA PI Integrator Insertion of Sensitive Information into Sent Data
- CVE-2025-36539AVEVA PI Data Archive Uncaught Exception
- CVE-2025-44019AVEVA PI Data Archive Uncaught Exception
- CVE-2025-2745AVEVA PI Web API Cross-site Scripting
- CVE-2025-4418AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value
- CVE-2025-4417AVEVA PI Connector for CygNet Cross-site Scripting
- CVE-2024-6456SQL Injection vulnerability in AVEVA Historian Server
- CVE-2024-6619Incorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report
- CVE-2024-6618Path Traversal in Ocean Data Systems Dream Report
- CVE-2024-7113Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server
- CVE-2024-3468Deserialization of Untrusted Data in AVEVA PI Web API
- CVE-2024-3467Deserialization of Untrusted Data in AVEVA PI Asset Framework Client