AVEVA

Records91All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high48CVSS 7.0–8.9

Exploited now

AVEVA records in CISA KEV

No AVEVA vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Edna Enterprise Data Historian · all components

TI-2020-10586 CVE-2020-13501 · GHSA-65w4-p422-2r48

MEDIUM 47

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89

TI-2020-10585 CVE-2020-13500 · GHSA-97q5-v434-9c8f

MEDIUM 47

SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89

TI-2020-10584 CVE-2020-13499 · GHSA-rhfw-3659-4c6v

MEDIUM 47

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89

TI-2020-10588 CVE-2020-13505 · GHSA-w944-cr63-4f5x

MEDIUM 44

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2020-09-24 No fix listed CWE-89

TI-2020-10587 CVE-2020-13504 · GHSA-mpqr-xh68-rm34

MEDIUM 44

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2020-09-24 No fix listed CWE-89