Skip to content
OpenAdvisories

Product · AVEVA

AVEVA System Platform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2022-0835

    AVEVA System Platform Cleartext Storage of Sensitive Information in Memory

    AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.

    AVEVA AVEVA System Platform
  • High 8.8
    CVE-2021-33008

    AVEVA System Platform Missing Authentication for Critical Function

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32981

    AVEVA System Platform Path Traversal

    AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize specia…

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32985

    AVEVA System Platform Origin Validation Error

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.

    AVEVA AVEVA System Platform
  • High 7.5
    CVE-2021-33010

    AVEVA System Platform Uncaught Exception

    An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32977

    AVEVA System Platform Improper Verification of Cryptographic Signature

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.

    AVEVA AVEVA System Platform