Read the docs

AVEVA

Records91All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high48CVSS 7.0–8.9

Exploited now

AVEVA records in CISA KEV

No AVEVA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aveva Edge 10 records MEDIUM Clearscada 9 records MEDIUM System Platform 9 records MEDIUM Edge 7 records MEDIUM Process Optimization 7 records MEDIUM Suitelink 6 records MEDIUM Edna Enterprise Data Historian 5 records MEDIUM Indusoft Web Studio 5 records MEDIUM

Records

10 records in Aveva Edge · all components

TI-2022-11329 CVE-2022-28685 · GHSA-f6pf-7qx7-fg5m

Deserialization of untrusted data in AVEVA Edge

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17157 Published 2023-03-29 No fix listed CWE-502
TI-2022-17174 CVE-2022-36969 · GHSA-j9gx-w67p-w37r

XML external entity injection in AVEVA Edge

Priority MEDIUM 46

This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.1379 Published 2023-03-29 No fix listed CWE-611
TI-2022-11331 CVE-2022-28687 · GHSA-p658-968w-vm74

Uncontrolled search path in AVEVA Edge

Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00971 Published 2023-03-29 No fix listed CWE-427
TI-2022-11332 CVE-2022-28688 · GHSA-2x7m-w9xq-pcvr

Uncontrolled search path in AVEVA Edge

Priority LOW 37

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00647 Published 2023-03-29 No fix listed CWE-427
TI-2022-11330 CVE-2022-28686 · GHSA-rh4w-wj5p-5r32

Uncontrolled search path in AVEVA Edge

Priority LOW 37

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00647 Published 2023-03-29 No fix listed CWE-427
TI-2015-00911 CVE-2015-0998 · GHSA-g465-mm63-2p8q

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine…

Priority LOW 17

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00774 Published 2015-03-29 No fix listed CWE-200
Open these records in search →