Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: AVEVA Component: Aveva Edge Clear all filters
TI-2022-17174 CVE-2022-36969 · GHSA-j9gx-w67p-w37r

XML external entity injection in AVEVA Edge

Priority MEDIUM 46

This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.1379 Published 2023-03-29 No fix listed CWE-611
TI-2022-11332 CVE-2022-28688 · GHSA-2x7m-w9xq-pcvr

Uncontrolled search path in AVEVA Edge

Priority LOW 37

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00647 Published 2023-03-29 No fix listed CWE-427
TI-2022-11331 CVE-2022-28687 · GHSA-p658-968w-vm74

Uncontrolled search path in AVEVA Edge

Priority LOW 38

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00971 Published 2023-03-29 No fix listed CWE-427
TI-2022-11330 CVE-2022-28686 · GHSA-rh4w-wj5p-5r32

Uncontrolled search path in AVEVA Edge

Priority LOW 37

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00647 Published 2023-03-29 No fix listed CWE-427
TI-2022-11329 CVE-2022-28685 · GHSA-f6pf-7qx7-fg5m

Deserialization of untrusted data in AVEVA Edge

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17157 Published 2023-03-29 No fix listed CWE-502
TI-2015-00911 CVE-2015-0998 · GHSA-g465-mm63-2p8q

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine…

Priority LOW 17

Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00774 Published 2015-03-29 No fix listed CWE-200