Skip to content
OpenAdvisories

Vendor

AVEVA

63 known vulnerabilities.

Products

Process Optimization 7 Edge 7 AVEVA System Platform 6 AVEVA System Platform 2020 6 AVEVA InTouch 2020 6 AVEVA Historian 2020 6 AVEVA Communication Drivers Pack 2020 6 AVEVA Batch Management 2020 6 AVEVA MES 2014 6 InTouch 5 PI Server 4 Pipeline Integrity Monitor 4 Application Server 4 Historian 3 Communication Drivers Pack 3 Batch Management 3 PI Data Archive 2 PI Connector for CygNet 2 PI Web API 2 SystemPlatform 2 Enterprise Licensing (formerly known as License Manager) 2 Manufacturing Execution System (formerly known as Wonderware MES) 2 Recipe Management 2 Edge (formerly known as Indusoft Web Studio) 2 Worktasks (formerly known as Workflow Management) 2 Plant SCADA (formerly known as Citect) 2 Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds) 2 Telemetry Server 2 PI Integrator 2 Wonderware System Platform 1 AVEVA Edge 1 InTouch Access Anywhere 1 Reports for Operations 1 Vijeo Citect and Citect SCADA 1 AVEVA Plant SCADA 1 AVEVA Telemetry Server 1 SuiteLink Server 1 PI Asset Framework Client 1 PI Data Archive PI Server 1 Pipeline Simulation 2025 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-5387

    AVEVA Pipeline Simulation Missing Authorization

    The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) roles, resulting in privilege escalation with potential for modification of simulatio…

    AVEVA Pipeline Simulation 2025
  • Critical 10.0
    CVE-2025-61937

    AVEVA Process Optimization Code Injection

    The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the  model application server.

    AVEVA Process Optimization
  • Critical 9.8
    CVE-2023-1256

    CVE-2023-1256

    The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

    AVEVA AVEVA Telemetry Server AVEVA Plant SCADA