Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: AVEVA PI Integrator 2020 R2 SP1 Clear all filters
TI-2025-34257 CVE-2025-54460 · GHSA-2j8g-w8gx-h43r

AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type

Priority LOW 31

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist files that could potentially be executed.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00295 Published 2025-08-21 Fixed in 2020 R2 SP1 CWE-434
TI-2025-27584 CVE-2025-41415 · GHSA-99gq-vc5v-9jjh

AVEVA PI Integrator Insertion of Sensitive Information into Sent Data

Priority LOW 31

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream re…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00366 Published 2025-08-21 Fixed in 2020 R2 SP1 CWE-201