Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
AvevaEdge*

3 matches found

CVE
CVE•added 2023/12/16 12:0 a.m.•59 views

CVE-2021-42794

AVEVA Edge (formerly InduSoft Web Studio)

5.3CVSS5.1AI score0.01199EPSS
CVE
CVE•added 2023/12/16 12:0 a.m.•59 views

CVE-2021-42796

CVE-2021-42796 affects AVEVA Edge (formerly InduSoft Web Studio) pre-2020 R2. The vulnerability is in the ExecuteCommand() function (stadosvr.exe) and allows unauthenticated arbitrary commands to execute, via improper access control. The issue is documented with a base CVSS v3.1 score of 9.8 (Net...

9.8CVSS9.4AI score0.01133EPSS
CVE
CVE•added 2023/12/16 12:0 a.m.•54 views

CVE-2021-42797

CVE-2021-42797 — AVEVA Edge (formerly InduSoft Web Studio) : Path traversal in AVEVA Edge versions R2020 and prior allows an unauthenticated user to disclose the Windows access token used for external DB resources. Affected product: AVEVA Edge; vulnerable component(s): runtime/installation flow t...

7.5CVSS7.5AI score0.01EPSS