Description
A cross-site scripting vulnerability exists in
AVEVA PI Connector for CygNet
Versions 1.6.14 and prior that, if exploited, could allow an
administrator miscreant with local access to the connector admin portal
to persist arbitrary JavaScript code that will be executed by other
users who visit affected pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | PI Connector for CygNet | ≤ 1.6.14 | — |
Advisories 1
- ICSA-25-162-09 AVEVA PI Connector for CygNet CISA ICS & IT advisories · Jun 12, 2025