CVE-2025-4417

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-36539 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service...

CVE-2025-36539 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service...

CVE-2025-36539

Summary: CVE-2025-36539 affects AVEVA PI Data Archive products, where an uncaught exception could be triggered by an authenticated user to shut down certain PI Data Archive subsystems, causing a denial of service. The issue is supported by multiple sources (NVD entry and Red Hat advisory) noting ...

CVE-2025-44019 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may...

CVE-2025-44019 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may...

CVE-2025-44019

The CVE-2025-44019 entry affects AVEVA PI Data Archive subsystems (PI Data Archive / PI Server) and is due to an uncaught exception that, when exploited by an authenticated user, can cause a denial-of-service condition and potentially data loss in snapshot/write cache. The NVD/CISA reports indica...

CVE-2025-2745 AVEVA PI Web API Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...

CVE-2025-2745 AVEVA PI Web API Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...

CVE-2025-2745

CVE-2025-2745 is a cross-site scripting vulnerability in AVEVA PI Web API (versions 2023 SP1 and prior). The root cause is improper handling that allows an authenticated attacker, with privileges to create/update annotations or upload media files, to persist arbitrary JavaScript code. The code co...

CVE-2025-4418 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...

CVE-2025-4418 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...

CVE-2025-4418

CVE-2025-4418 affects AVEVA PI Connector for CygNet versions 1.6.14 and earlier. The issue is an improper validation of integrity check values, which could allow a user with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) and cause the connector service ...

CVE-2025-4417 AVEVA PI Connector for CygNet Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-4417 AVEVA PI Connector for CygNet Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-4417

CVE-2025-4417 – AVEVA PI Connector for CygNet Affected product: AVEVA PI Connector for CygNet, version 1.6.14 and prior. Vulnerability: Cross-site scripting (XSS) that, if exploited, could let an administrator with local access to the connector admin portal persist arbitrary JavaScript code to be...

AVEVA PI Data Archive 安全漏洞

AVEVA PI Data Archive is a system for storing, managing and accessing historical industrial process data from AVEVA UK. A security vulnerability exists in the AVEVA PI Data Archive that stems from an uncaught exception that could lead to a denial of service and data loss...

AVEVA PI Data Archive 安全漏洞

AVEVA PI Data Archive is a system for storing, managing and accessing historical industrial process data from AVEVA UK. A security vulnerability exists in the AVEVA PI Data Archive that stems from an uncaught exception that could lead to a denial of service...

AVEVA PI Web API 跨站脚本漏洞

AVEVA PI Web API is an API interface from AVEVA UK. A cross-site scripting vulnerability exists in AVEVA PI Web API 2023 SP1 and prior versions, which stems from allowing an authenticated attacker to persist arbitrary JavaScript code, potentially leading to cross-site scripting attacks...

PT-2025-25353

Name of the Vulnerable Software and Affected Versions AVEVA PI Data Archive products affected versions not specified Description The issue concerns an uncaught exception that could be exploited by an authenticated user to shut down necessary subsystems of the AVEVA PI Data Archive, resulting in a...