CVE-2025-44019 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may...

CVE-2025-44019

The CVE-2025-44019 entry affects AVEVA PI Data Archive subsystems (PI Data Archive / PI Server) and is due to an uncaught exception that, when exploited by an authenticated user, can cause a denial-of-service condition and potentially data loss in snapshot/write cache. The NVD/CISA reports indica...

CVE-2025-44019 AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may...

CVE-2025-2745 AVEVA PI Web API Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...

CVE-2025-2745

CVE-2025-2745 is a cross-site scripting vulnerability in AVEVA PI Web API (versions 2023 SP1 and prior). The root cause is improper handling that allows an authenticated attacker, with privileges to create/update annotations or upload media files, to persist arbitrary JavaScript code. The code co...

CVE-2025-2745 AVEVA PI Web API Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...

CVE-2025-4418 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...

CVE-2025-4418

CVE-2025-4418 affects AVEVA PI Connector for CygNet versions 1.6.14 and earlier. The issue is an improper validation of integrity check values, which could allow a user with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) and cause the connector service ...

CVE-2025-4418 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...

CVE-2025-4417 AVEVA PI Connector for CygNet Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-4417 AVEVA PI Connector for CygNet Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

CVE-2025-4417

CVE-2025-4417 – AVEVA PI Connector for CygNet Affected product: AVEVA PI Connector for CygNet, version 1.6.14 and prior. Vulnerability: Cross-site scripting (XSS) that, if exploited, could let an administrator with local access to the connector admin portal persist arbitrary JavaScript code to be...

PT-2025-25351 · Aveva · Aveva Pi Connector For Cygnet

Name of the Vulnerable Software and Affected Versions: AVEVA PI Connector for CygNet versions 1.6.14 and prior Description: An improper validation of integrity check value issue exists that, if exploited, could allow a miscreant with elevated privileges to modify local data files in a way that...

PT-2025-25350 · Aveva · Aveva Pi Connector For Cygnet

Name of the Vulnerable Software and Affected Versions: AVEVA PI Connector for CygNet versions 1.6.14 and prior Description: A cross-site scripting issue exists that could allow an administrator with local access to the connector admin portal to persist arbitrary JavaScript code, which will be...

AVEVA PI Data Archive 安全漏洞

AVEVA PI Data Archive is a system for storing, managing and accessing historical industrial process data from AVEVA UK. A security vulnerability exists in the AVEVA PI Data Archive that stems from an uncaught exception that could lead to a denial of service...

PT-2025-25349 · Aveva · Aveva Pi Web Api

Name of the Vulnerable Software and Affected Versions: AVEVA PI Web API versions 2023 SP1 and prior Description: A cross-site scripting issue exists that could allow an authenticated attacker with privileges to create or update annotations, or upload media files, to persist arbitrary JavaScript...

PT-2025-25353

Name of the Vulnerable Software and Affected Versions AVEVA PI Data Archive products affected versions not specified Description The issue concerns an uncaught exception that could be exploited by an authenticated user to shut down necessary subsystems of the AVEVA PI Data Archive, resulting in a...

AVEVA PI Connector for CygNet 跨站脚本漏洞

AVEVA PI Connector for CygNet is a tool from AVEVA UK that provides unidirectional data transfer from CygNet SCADA systems to PI systems. A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet version 1.6.14 and earlier, which stems from allowing an administrator to persist...

MAL-2025-4886 Malicious code in soracom-xmas-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 409a66069270c0626a428339c624520ef13c0cd1b1a96b7068da663ba96c065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soracom-xmas-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 409a66069270c0626a428339c624520ef13c0cd1b1a96b7068da663ba96c065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...