PI Connector for CygNet XSS

The vulnerability of the PI Connector for CygNet data integration software is related to insufficient protection of the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

CVE-2025-4417: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-4418: Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...