Skip to content
OpenAdvisories

Product · AVEVA

Application Server

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-8386

    AVEVA Application Server IDE Basic Cross-site Scripting

    The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper with App Objects' help files and persist a cross-site scripting (XSS) injection that when executed by a victim user, can result in horizontal…

    AVEVA Application Server
  • Medium 5.5
    CVE-2023-34982

    AVEVA Operations Control Logger External Control of File Name or Path

    This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

    AVEVA Application Server InTouch Communication Drivers Pack Browsers