Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-41415 EUVD-2025-25490GHSA-99gq-vc5v-9jjh

AVEVA PI Integrator Insertion of Sensitive Information into Sent Data

Published Aug 21, 2025 · Updated Aug 21, 2025 · Assigned by icscert

Description

The vulnerability, if exploited, could allow an authenticated miscreant
(with privileges to access publication targets) to retrieve sensitive
information that could then be used to gain additional access to
downstream resources.

Affected products

VendorProductAffectedFixed
AVEVA PI Integrator < 2020 R2 SP1 2020 R2 SP1

Advisories 1

References