Login Request a demo
AV
Vendor
Aveva
41 products with CVEs on record
120
CVEs
0
On KEV
0
New 30D
Products
AE
Aveva Edge
Aveva
7.8
10 CVEs0 on KEV0 new
CL
Clearscada
Aveva
7.5
9 CVEs0 on KEV0 new
SP
System Platform
Aveva
9.8
9 CVEs0 on KEV0 new
ED
Edge
AVEVA
9.8
8 CVEs0 on KEV0 new
PO
Process Optimization
AVEVA
10.0
7 CVEs0 on KEV0 new
SU
Suitelink
Aveva
9.8
6 CVEs0 on KEV0 new
EE
Edna Enterprise Data Historian
Aveva
9.8
5 CVEs0 on KEV0 new
IW
Indusoft Web Studio
Aveva
9.8
5 CVEs0 on KEV0 new
IM
Intouch Machine Edition 2014
Aveva
9.8
4 CVEs0 on KEV0 new
PI
Pipeline Integrity Monitor
AVEVA
8.4
4 CVEs0 on KEV0 new
BM
Batch Management
Aveva
7.8
3 CVEs0 on KEV0 new
ME
Manufacturing Execution System
Aveva
7.8
3 CVEs0 on KEV0 new
MO
Mobile Operator
Aveva
7.8
3 CVEs0 on KEV0 new
TS
Telemetry Server
Aveva
9.8
3 CVEs0 on KEV0 new
WI
Wonderware Intouch Access Anywhere
Aveva
9.8
3 CVEs0 on KEV0 new
WT
Work Tasks
Aveva
7.8
3 CVEs0 on KEV0 new
CD
Communication Drivers
Aveva
7.8
2 CVEs0 on KEV0 new
EL
Enterprise Licensing
Aveva
7.8
2 CVEs0 on KEV0 new
HI
Historian
Aveva
7.8
2 CVEs0 on KEV0 new
IN
Intouch
Aveva
7.8
2 CVEs0 on KEV0 new
I2
Intouch 2017
Aveva
9.8
2 CVEs0 on KEV0 new
IA
Intouch Access Anywhere
Aveva
9.9
2 CVEs0 on KEV0 new
PS
PI Server
Aveva
7.5
2 CVEs0 on KEV0 new
PS
Plant Scada
Aveva
7.8
2 CVEs0 on KEV0 new
PC
Platform Common Services
Aveva
7.8
2 CVEs0 on KEV0 new
RM
Recipe Management
Aveva
7.8
2 CVEs0 on KEV0 new
AS
Application Server
AVEVA
6.9
1 CVEs0 on KEV0 new
AE
AVEVA Enterprise SCADA
AVEVA
7.1
1 CVEs0 on KEV0 new
AE
AVEVA Enterprise SCADA HMI
AVEVA
7.1
1 CVEs0 on KEV0 new
AP
Aveva Plant Scada
Aveva
9.8
1 CVEs0 on KEV0 new
ED
Enterprise Data Management
Aveva
7.8
1 CVEs0 on KEV0 new
IF
Iec870ip Firmware
Aveva
7.5
1 CVEs0 on KEV0 new
I2
Intouch 2014
Aveva
9.8
1 CVEs0 on KEV0 new
I2
Intouch 2020
Aveva
5.5
1 CVEs0 on KEV0 new
IM
Intouch Machine 2017
Aveva
9.8
1 CVEs0 on KEV0 new
PA
PI Asset Framework Client
Aveva
7.8
1 CVEs0 on KEV0 new
PD
PI Data Archive PI Server
AVEVA
7.5
1 CVEs0 on KEV0 new
PT
PI to CONNECT Agent
AVEVA
6.5
1 CVEs0 on KEV0 new
PS
Pipeline Simulation 2025
AVEVA
9.3
1 CVEs0 on KEV0 new
PS
Plant Scada Access Anywhere
Aveva
9.9
1 CVEs0 on KEV0 new
WS
Wonderware System Platform
Aveva
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-81821
PI
Pipeline Integrity Monitor
AVEVA
8.4
0%
Sep 8AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
CVE-2026-81822
PI
Pipeline Integrity Monitor
AVEVA
8.4
0%
Sep 8AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-81823
PI
Pipeline Integrity Monitor
AVEVA
5.3
0%
Sep 8AVEVA Pipeline Integrity Monitor Missing Authorization
CVE-2026-81824
PI
Pipeline Integrity Monitor
AVEVA
4.7
0%
Sep 8AVEVA Pipeline Integrity Monitor cross-site scripting
CVE-2025-7639
AE
AVEVA Enterprise SCADA
AVEVA
7.1
1%
Aug 14AVEVA Enterprise SCADA Deserialization of Untrusted Data
CVE-2026-5387
PS
Pipeline Simulation 2025
AVEVA
9.3
0%
Apr 15AVEVA Pipeline Simulation Missing Authorization
CVE-2026-1507
PD
PI Data Archive PI Server
AVEVA
7.5
0%
Feb 10Uncaught Exception vulnerability in AVEVA PI Data Archive
CVE-2026-1495
PT
PI to CONNECT Agent
AVEVA
6.5
0%
Feb 10Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
CVE-2025-64769
PO
Process Optimization
AVEVA
7.1
0%
Jan 16AVEVA Process Optimization Cleartext Transmission of Sensitive Information
CVE-2025-65117
PO
Process Optimization
AVEVA
7.7
0%
Jan 16AVEVA Process Optimization Use of Potentially Dangerous Function
CVE-2025-64729
PO
Process Optimization
AVEVA
8.2
0%
Jan 16AVEVA Process Optimization Missing Authorization
CVE-2025-65118
PO
Process Optimization
AVEVA
8.8
0%
Jan 16AVEVA Process Optimization Uncontrolled Search Path Element
CVE-2025-61943
PO
Process Optimization
AVEVA
7.8
0%
Jan 16AVEVA Process Optimization SQL Injection
CVE-2025-64691
PO
Process Optimization
AVEVA
8.8
0%
Jan 16AVEVA Process Optimization Code Injection
CVE-2025-61937
PO
Process Optimization
AVEVA
10.0
1%
Jan 16AVEVA Process Optimization Code Injection
CVE-2025-8386
AS
Application Server
AVEVA
6.9
0%
Nov 14AVEVA Application Server IDE Basic Cross-site Scripting
CVE-2025-9317
ED
Edge
AVEVA
8.4
0%
Nov 14AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3467
PA
PI Asset Framework Client
Aveva
7.8
0%
Jun 12There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive…
CVE-2023-6132
PC
Platform Common Services
Aveva
7.8
0%
Feb 29The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge…
CVE-2023-34348
PS
PI Server
Aveva
7.5
1%
Jan 18AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI…
CVE-2023-31274
PS
PI Server
Aveva
5.3
1%
Jan 18AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to…
CVE-2021-42797
ED
Edge
Aveva
7.5
1%
Dec 16Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user…
CVE-2021-42796
ED
Edge
Aveva
9.8
1%
Dec 16An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed
CVE-2021-42794
ED
Edge
Aveva
5.3
1%
Dec 16An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior
CVE-2023-34982
BM
Batch Management
Aveva
7.1
0%
Nov 15This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where…
CVE-2023-33873
BM
Batch Management
Aveva
7.8
0%
Nov 15This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where…
CVE-2022-36970
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2
CVE-2022-36969
AE
Aveva Edge
Aveva
7.1
14%
Mar 29This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28688
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28687
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28686
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28685
AE
Aveva Edge
Aveva
7.8
17%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2023-1256
AP
Aveva Plant Scada
Aveva
9.8
1%
Mar 16The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read…
CVE-2022-23854
IA
Intouch Access Anywhere
Aveva
7.5
50%
Dec 23AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on…
CVE-2021-38410
BM
Batch Management
Aveva
7.8
0%
Jul 27AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may…
CVE-2022-1467
IA
Intouch Access Anywhere
Aveva
9.9
1%
May 23Windows OS can be configured to overlay a “language bar” on top of any application
CVE-2022-0835
SP
System Platform
Aveva
5.5
0%
Apr 11AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user
CVE-2021-33010
SP
System Platform
Aveva
7.5
1%
Apr 4An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition
CVE-2021-33008
SP
System Platform
Aveva
9.8
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity
CVE-2021-32985
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid
CVE-2021-32981
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a…
CVE-2021-32977
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data
CVE-2021-32999
SU
Suitelink
Aveva
7.5
1%
Sep 23Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
CVE-2021-32987
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing command 0x0b
CVE-2021-32979
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
CVE-2021-32971
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing command 0x07
CVE-2021-32963
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
CVE-2021-32959
SU
Suitelink
Aveva
9.8
1%
Sep 23Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
CVE-2021-32942
I2
Intouch 2017
Aveva
5.5
0%
Jun 9The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a…
CVE-2020-13505
EE
Edna Enterprise Data Historian
Aveva
9.8
1%
Sep 24Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks
CVE-2020-13504
EE
Edna Enterprise Data Historian
Aveva
9.8
1%
Sep 24Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks
CVE-2020-13501
EE
Edna Enterprise Data Historian
Aveva
9.8
3%
Sep 24An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053
CVE-2020-13500
EE
Edna Enterprise Data Historian
Aveva
9.8
3%
Sep 24SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053
CVE-2020-13499
EE
Edna Enterprise Data Historian
Aveva
9.8
3%
Sep 24An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053
CVE-2019-13537
IF
Iec870ip Firmware
Aveva
7.5
1%
Jan 14The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side…
CVE-2019-6525
WS
Wonderware System Platform
Aveva
8.8
1%
Apr 11AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications
CVE-2019-6545
IW
Indusoft Web Studio
Aveva
7.5
14%
Feb 13AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
CVE-2019-6543
IW
Indusoft Web Studio
Aveva
9.8
17%
Feb 13AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
CVE-2018-17916
IW
Indusoft Web Studio
Aveva
9.8
4%
Nov 2InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2
CVE-2018-17914
IW
Indusoft Web Studio
Aveva
9.8
5%
Nov 2InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2