Skip to content
OpenAdvisories
Medium ICSA-25-162-08 1 CVE

AVEVA PI Web API

Published Jun 12, 2025 · Updated Jun 12, 2025

Vendor: AVEVA Product: PI Web API

Summary

Successful exploitation of this vulnerability could allow an attacker to disable content security policy protections.

Vulnerabilities 1

  • Medium 6.5
    CVE-2025-2745

    AVEVA PI Web API Cross-site Scripting

    A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker (with privileges to create/update annotations or upload media files) to persist arbitrary JavaScript code that…

    AVEVA PI Web API

Revision history

  1. #1

    Initial Publication

References