Login Request a demo
AV
Vendor
AVEVA
57 products with CVEs on record
160
CVEs
0
On KEV
0
New 30D
Products
AE
AVEVA Edge
AVEVA
7.8
11 CVEs0 on KEV0 new
CL
Clearscada
Aveva
7.5
9 CVEs0 on KEV0 new
SP
System Platform
Aveva
9.8
9 CVEs0 on KEV0 new
ED
Edge
AVEVA
9.8
8 CVEs0 on KEV0 new
PO
Process Optimization
AVEVA
10.0
7 CVEs0 on KEV0 new
SU
Suitelink
Aveva
9.8
6 CVEs0 on KEV0 new
EE
Edna Enterprise Data Historian
Aveva
9.8
5 CVEs0 on KEV0 new
IW
Indusoft Web Studio
Aveva
9.8
5 CVEs0 on KEV0 new
AS
Application Server
AVEVA
8.7
4 CVEs0 on KEV0 new
BM
Batch Management
AVEVA
8.7
4 CVEs0 on KEV0 new
HI
Historian
AVEVA
8.7
4 CVEs0 on KEV0 new
IM
Intouch Machine Edition 2014
Aveva
9.8
4 CVEs0 on KEV0 new
PS
PI Server
Aveva
7.5
4 CVEs0 on KEV0 new
PI
Pipeline Integrity Monitor
AVEVA
8.4
4 CVEs0 on KEV0 new
CD
Communication Drivers Pack
AVEVA
8.7
3 CVEs0 on KEV0 new
IN
InTouch
AVEVA
8.7
3 CVEs0 on KEV0 new
ME
Manufacturing Execution System
Aveva
7.8
3 CVEs0 on KEV0 new
MO
Mobile Operator
Aveva
7.8
3 CVEs0 on KEV0 new
TS
Telemetry Server
AVEVA
9.8
3 CVEs0 on KEV0 new
WI
Wonderware Intouch Access Anywhere
Aveva
9.8
3 CVEs0 on KEV0 new
WT
Work Tasks
Aveva
7.8
3 CVEs0 on KEV0 new
CD
Communication Drivers
Aveva
7.8
2 CVEs0 on KEV0 new
EF
Edge (formerly known as Indusoft Web Studio)
AVEVA
7.8
2 CVEs0 on KEV0 new
EL
Enterprise Licensing
Aveva
7.8
2 CVEs0 on KEV0 new
EL
Enterprise Licensing (formerly known as License Manager)
AVEVA
7.8
2 CVEs0 on KEV0 new
I2
Intouch 2017
Aveva
9.8
2 CVEs0 on KEV0 new
IA
Intouch Access Anywhere
Aveva
9.9
2 CVEs0 on KEV0 new
ME
Manufacturing Execution System (formerly known as Wonderware MES)
AVEVA
7.8
2 CVEs0 on KEV0 new
MO
Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)
AVEVA
7.8
2 CVEs0 on KEV0 new
PC
PI Connector for CygNet
AVEVA
5.5
2 CVEs0 on KEV0 new
PD
PI Data Archive
AVEVA
7.1
2 CVEs0 on KEV0 new
PI
PI Integrator
AVEVA
7.1
2 CVEs0 on KEV0 new
PW
PI Web API
AVEVA
8.4
2 CVEs0 on KEV0 new
PS
Plant Scada
Aveva
7.8
2 CVEs0 on KEV0 new
PS
Plant SCADA (formerly known as Citect)
AVEVA
7.8
2 CVEs0 on KEV0 new
PC
Platform Common Services
Aveva
7.8
2 CVEs0 on KEV0 new
RM
Recipe Management
AVEVA
7.8
2 CVEs0 on KEV0 new
RF
Reports for Operations 2023
AVEVA
8.5
2 CVEs0 on KEV0 new
SY
SystemPlatform
AVEVA
7.8
2 CVEs0 on KEV0 new
WF
Worktasks (formerly known as Workflow Management)
AVEVA
7.8
2 CVEs0 on KEV0 new
AE
AVEVA Enterprise SCADA
AVEVA
7.1
1 CVEs0 on KEV0 new
AE
AVEVA Enterprise SCADA HMI
AVEVA
7.1
1 CVEs0 on KEV0 new
AP
Aveva Plant Scada
Aveva
9.8
1 CVEs0 on KEV0 new
ED
Enterprise Data Management
Aveva
7.8
1 CVEs0 on KEV0 new
HW
Historian Web Server
AVEVA
8.5
1 CVEs0 on KEV0 new
IF
Iec870ip Firmware
Aveva
7.5
1 CVEs0 on KEV0 new
I2
Intouch 2014
Aveva
9.8
1 CVEs0 on KEV0 new
I2
Intouch 2020
Aveva
5.5
1 CVEs0 on KEV0 new
IM
Intouch Machine 2017
Aveva
9.8
1 CVEs0 on KEV0 new
PA
PI Asset Framework Client
AVEVA
7.8
1 CVEs0 on KEV0 new
PD
PI Data Archive PI Server
AVEVA
7.5
1 CVEs0 on KEV0 new
PT
PI to CONNECT Agent
AVEVA
6.5
1 CVEs0 on KEV0 new
PS
Pipeline Simulation 2025
AVEVA
9.3
1 CVEs0 on KEV0 new
PS
Plant Scada Access Anywhere
Aveva
9.9
1 CVEs0 on KEV0 new
RF
Reports for Operations
AVEVA
8.5
1 CVEs0 on KEV0 new
SS
SuiteLink Server
AVEVA
8.7
1 CVEs0 on KEV0 new
WS
Wonderware System Platform
Aveva
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-81821
PI
Pipeline Integrity Monitor
AVEVA
8.4
0%
Sep 8AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
CVE-2026-81822
PI
Pipeline Integrity Monitor
AVEVA
8.4
0%
Sep 8AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-81823
PI
Pipeline Integrity Monitor
AVEVA
5.3
0%
Sep 8AVEVA Pipeline Integrity Monitor Missing Authorization
CVE-2026-81824
PI
Pipeline Integrity Monitor
AVEVA
4.7
0%
Sep 8AVEVA Pipeline Integrity Monitor cross-site scripting
CVE-2025-7639
AE
AVEVA Enterprise SCADA HMI
AVEVA
7.1
1%
Aug 14AVEVA Enterprise SCADA Deserialization of Untrusted Data
CVE-2026-5387
PS
Pipeline Simulation 2025
AVEVA
9.3
0%
Apr 15AVEVA Pipeline Simulation Missing Authorization
CVE-2026-1507
PD
PI Data Archive PI Server
AVEVA
7.5
0%
Feb 10Uncaught Exception vulnerability in AVEVA PI Data Archive
CVE-2026-1495
PT
PI to CONNECT Agent
AVEVA
6.5
0%
Feb 10Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent
CVE-2025-64769
PO
Process Optimization
AVEVA
7.1
0%
Jan 16AVEVA Process Optimization Cleartext Transmission of Sensitive Information
CVE-2025-65117
PO
Process Optimization
AVEVA
7.7
0%
Jan 16AVEVA Process Optimization Use of Potentially Dangerous Function
CVE-2025-64729
PO
Process Optimization
AVEVA
8.2
0%
Jan 16AVEVA Process Optimization Missing Authorization
CVE-2025-65118
PO
Process Optimization
AVEVA
8.8
0%
Jan 16AVEVA Process Optimization Uncontrolled Search Path Element
CVE-2025-61943
PO
Process Optimization
AVEVA
7.8
0%
Jan 16AVEVA Process Optimization SQL Injection
CVE-2025-64691
PO
Process Optimization
AVEVA
8.8
0%
Jan 16AVEVA Process Optimization Code Injection
CVE-2025-61937
PO
Process Optimization
AVEVA
10.0
1%
Jan 16AVEVA Process Optimization Code Injection
CVE-2025-8386
AS
Application Server
AVEVA
6.9
0%
Nov 14AVEVA Application Server IDE Basic Cross-site Scripting
CVE-2025-9317
ED
Edge
AVEVA
8.4
0%
Nov 14AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-54460
PI
PI Integrator
AVEVA
7.1
0%
Aug 21AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type
CVE-2025-41415
PI
PI Integrator
AVEVA
6.5
0%
Aug 21AVEVA PI Integrator Insertion of Sensitive Information into Sent Data
CVE-2025-36539
PS
PI Server
AVEVA
6.5
0%
Jun 12AVEVA PI Data Archive Uncaught Exception
CVE-2025-44019
PD
PI Data Archive
AVEVA
7.1
0%
Jun 12AVEVA PI Data Archive Uncaught Exception
CVE-2025-2745
PW
PI Web API
AVEVA
6.5
0%
Jun 12AVEVA PI Web API Cross-site Scripting
CVE-2025-4418
PC
PI Connector for CygNet
AVEVA
4.4
0%
Jun 12AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value
CVE-2025-4417
PC
PI Connector for CygNet
AVEVA
5.5
0%
Jun 12AVEVA PI Connector for CygNet Cross-site Scripting
CVE-2024-6456
HW
Historian Web Server
AVEVA
8.5
0%
Aug 15SQL Injection vulnerability in AVEVA Historian Server
CVE-2024-6619
RF
Reports for Operations 2023
AVEVA
8.5
0%
Aug 13Incorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report
CVE-2024-6618
RF
Reports for Operations
AVEVA
8.5
0%
Aug 13Path Traversal in Ocean Data Systems Dream Report
CVE-2024-7113
HI
Historian
AVEVA
8.7
0%
Aug 13Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server
CVE-2024-3468
PW
PI Web API
AVEVA
8.4
0%
Jun 12Deserialization of Untrusted Data in AVEVA PI Web API
CVE-2024-3467
PA
PI Asset Framework Client
AVEVA
7.8
0%
Jun 12Deserialization of Untrusted Data in AVEVA PI Asset Framework Client
CVE-2023-6132
AE
AVEVA Edge
AVEVA
7.8
0%
Feb 29AVEVA Edge products Uncontrolled Search Path Element
CVE-2023-34348
PS
PI Server
Aveva
7.5
1%
Jan 18Improper Check or Handling of Exceptional Conditions in Aveva PI Server
CVE-2023-31274
PS
PI Server
Aveva
5.3
1%
Jan 18Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server
CVE-2021-42797
ED
Edge
Aveva
7.5
1%
Dec 16Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user…
CVE-2021-42796
ED
Edge
Aveva
9.8
1%
Dec 16An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed
CVE-2021-42794
ED
Edge
Aveva
5.3
1%
Dec 16An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior
CVE-2023-34982
PS
Plant SCADA (formerly known as Citect)
AVEVA
7.1
0%
Nov 15AVEVA Operations Control Logger External Control of File Name or Path
CVE-2023-33873
EF
Edge (formerly known as Indusoft Web Studio)
AVEVA
7.8
0%
Nov 15AVEVA Operations Control Logger Execution with Unnecessary Privileges
CVE-2022-36970
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2
CVE-2022-36969
AE
Aveva Edge
Aveva
7.1
14%
Mar 29This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28688
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28687
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28686
AE
Aveva Edge
Aveva
7.8
1%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2022-28685
AE
Aveva Edge
Aveva
7.8
17%
Mar 29This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000)
CVE-2023-1256
AP
Aveva Plant Scada
Aveva
9.8
1%
Mar 16The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read…
CVE-2022-23854
IA
Intouch Access Anywhere
Aveva
7.5
50%
Dec 23AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on…
CVE-2021-38410
ME
Manufacturing Execution System
Aveva
7.8
0%
Jul 27AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may…
CVE-2022-1467
IA
Intouch Access Anywhere
Aveva
9.9
1%
May 23Windows OS can be configured to overlay a “language bar” on top of any application
CVE-2022-0835
SP
System Platform
Aveva
5.5
0%
Apr 11AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user
CVE-2021-33010
SP
System Platform
Aveva
7.5
1%
Apr 4An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition
CVE-2021-33008
SP
System Platform
Aveva
9.8
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity
CVE-2021-32985
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid
CVE-2021-32981
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a…
CVE-2021-32977
SP
System Platform
Aveva
7.2
1%
Apr 4AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data
CVE-2021-32999
SU
Suitelink
Aveva
7.5
1%
Sep 23Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
CVE-2021-32987
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing command 0x0b
CVE-2021-32979
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
CVE-2021-32971
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing command 0x07
CVE-2021-32963
SU
Suitelink
Aveva
7.5
1%
Sep 23Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
CVE-2021-32959
SU
Suitelink
Aveva
9.8
1%
Sep 23Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06