Skip to content
OpenAdvisories

Vendor

AVEVA Software

7 known vulnerabilities.

AVEVA Software at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

AVEVA System Platform 2020 6 AVEVA InTouch 2020 6 AVEVA Historian 2020 6 AVEVA Communication Drivers Pack 2020 6 AVEVA Batch Management 2020 6 AVEVA MES 2014 6 InduSoft Web Studio 1 InTouch Machine Edition 1 Plant SCADA Access Anywhere 0 AVEVA Edge 0 InTouch Edge HMI (formerly InTouch Machine Edition) 0 CitectSCADA 0 Enterprise Data Management Web 0 AVEVA InTouch Access Anywhere 0 AVEVA Plant SCADA Access Anywhere (formerly known as AVEVA Citect Anywhere and Schneider Electric Citect Anywhere) 0 Citect SCADA 0 Vijeo Citect 0 Vijeo Citect and Citect SCADA Floating License Manager 0 AVEVA System Platform 0 AVEVA MES 0 AVEVA Batch Management 0 AVEVA InTouch 0 AVEVA Communication Drivers Pack 0 AVEVA Data Acquisition Servers 0 AVEVA Historian 0 AVEVA Operations Integration Core 0 Wonderware System Platform 2017 0 InTouch 0 PCS 0 Historian Client 0 Wonderware License Server 0 Wonderware Information Server 0 AVEVA Edge 2020 0 Vulnerable versions of jQuery are those 0 InTouch Access Anywhere 0 InTouch Edge HMI 0

Latest advisories

  • Critical max 9.8
    ICSA-22-342-02 3 CVEs rev. 2

    AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

    This updated advisory is a follow-up to the original advisory titled ICSA-22-342-02 AVEVA InTouch Access Anywhere, published December 8, 2022 on the ICS webpage at cisa.gov/topics/industrial-control-systems.

    AVEVA Software
    first Dec 8, 2022
  • Critical max 9.8
    ICSA-22-326-01 4 CVEs

    AVEVA Edge

    Successful exploitation of these vulnerabilities could allow an attacker to insert malicious DLL files and trick the application into executing code.

    AVEVA Software
  • High max 7.8
    ICSA-22-249-02 6 CVEs

    AVEVA Edge 2020 R2 SP1 and all prior versions

    Successful exploitation of these vulnerabilities could result in arbitrary code execution, information disclosure, or denial of service.

    AVEVA Software
  • High max 7.4
    ICSA-22-130-05 1 CVE

    AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

    Successful exploitation of this vulnerability could allow an authenticated user to escape from the context of the streamed application into the OS and launch arbitrary OS commands.

    AVEVA Software
  • High max 8.1
    ICSA-22-067-02 1 CVE

    AVEVA System Platform

    Successful exploitation of this vulnerability could expose cleartext credentials for the network user account or for logged-in users to an authorized, low privilege user. The cleartext credentials would also be exposed if the user creates a diagnostic memory …

    AVEVA Software
All Critical High Medium Low Exploited only Public exploit

7 results · Feed