Skip to content
OpenAdvisories
High ICSA-25-224-04 2 CVEs

AVEVA PI Integrator

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: AVEVA Product: PI Integrator for Business Analytics

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files.

Vulnerabilities 2

  • High 7.1
    CVE-2025-54460

    AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type

    The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist files that could potentially be executed.

    AVEVA PI Integrator
  • Medium 6.5
    CVE-2025-41415

    AVEVA PI Integrator Insertion of Sensitive Information into Sent Data

    The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream resources.

    AVEVA PI Integrator

Revision history

  1. #1

    Initial Publication

References