Aveva vulnerabilities
55 CVEs and advisories name Aveva as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-6132AVEVA Edge products Uncontrolled Search Path Element
- CVE-2023-34348Improper Check or Handling of Exceptional Conditions in Aveva PI Server
- CVE-2023-31274Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server
- CVE-2023-34982AVEVA Operations Control Logger External Control of File Name or Path
- CVE-2023-33873AVEVA Operations Control Logger Execution with Unnecessary Privileges
- CVE-2022-36970This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000
- CVE-2022-36969This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2
- CVE-2022-28688This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802
- CVE-2022-28687This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802
- CVE-2022-28686This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802
- CVE-2022-28685This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802
- CVE-2023-1256CVE-2023-1256
- CVE-2022-23854AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user
- CVE-2021-38410AVEVA PCS Portal Uncontrolled Search Path Element
- CVE-2022-1467AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere
- CVE-2022-0835AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
- CVE-2021-33008AVEVA System Platform Missing Authentication for Critical Function
- CVE-2021-32981AVEVA System Platform Path Traversal
- CVE-2021-32985AVEVA System Platform Origin Validation Error
- CVE-2021-33010AVEVA System Platform Uncaught Exception
- CVE-2021-32977AVEVA System Platform Improper Verification of Cryptographic Signature
- CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authoriz
- CVE-2019-13537The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerabi
- CVE-2019-10981In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user
- CVE-2019-6525AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and i