Log in Start free

AVEVA

Products

ProductCVEsExploitedLatest
Process Optimization7–Jan 16, 2026
Edge7–Nov 14, 2025
AVEVA System Platform6–Apr 11, 2022
InTouch4–Aug 13, 2024
Pipeline Integrity Monitor4–Sep 8, 2026
PI Server4–Jun 12, 2025
Application Server4–Nov 14, 2025
Historian3–Aug 13, 2024
Batch Management3–Aug 13, 2024
Communication Drivers Pack3–Aug 13, 2024
Telemetry Server2–Nov 15, 2023
Worktasks (formerly known as Workflow Management)2–Nov 15, 2023
Manufacturing Execution System (formerly known as Wonderware MES)2–Nov 15, 2023
Plant SCADA (formerly known as Citect)2–Nov 15, 2023
PI Connector for CygNet2–Jun 12, 2025
PI Data Archive2–Jun 12, 2025
Edge (formerly known as Indusoft Web Studio)2–Nov 15, 2023
PI Integrator2–Aug 21, 2025
Enterprise Licensing (formerly known as License Manager)2–Nov 15, 2023
PI Web API2–Jun 12, 2025
Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)2–Nov 15, 2023
Recipe Management2–Nov 15, 2023
SystemPlatform2–Nov 15, 2023
Reports for Operations1–Aug 13, 2024
AVEVA Edge1–Feb 29, 2024
AVEVA Enterprise SCADA1–Aug 14, 2026
AVEVA Enterprise SCADA HMI1–Aug 14, 2026
AVEVA InTouch Access Anywhere1–May 23, 2022
AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)1–Aug 14, 2026
AVEVA Pipeline Operations for Gas/Liquids1–Aug 14, 2026
AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)1–Aug 14, 2026
AVEVA Plant SCADA1–Mar 16, 2023
AVEVA Plant SCADA Access Anywhere1–May 23, 2022
AVEVA Telemetry Server1–Mar 16, 2023
Historian Web Server1–Aug 15, 2024
InTouch Access Anywhere1–Dec 23, 2022
Measurement Advisor1–Aug 14, 2026
PI Asset Framework Client1–Jun 12, 2024
PI Data Archive PI Server1–Feb 10, 2026
PI to CONNECT Agent1–Feb 10, 2026
Pipeline Simulation 20251–Apr 15, 2026
Platform Common Services (PCS) Portal1–Jul 27, 2022
Reports for Operations 20231–Aug 13, 2024
SuiteLink Server1–Aug 13, 2024

Exploited and recent CVEs

  • CVE-2026-81821 High 8.4 AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key 0.2%
  • CVE-2026-81822 High 8.4 AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm 0.1%
  • CVE-2026-81823 Medium 5.3 AVEVA Pipeline Integrity Monitor Missing Authorization 0.4%
  • CVE-2026-81824 Medium 4.7 AVEVA Pipeline Integrity Monitor cross-site scripting 0.4%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2025-7639 High 7.1 AVEVA Enterprise SCADA Deserialization of Untrusted Data 0.6%
  • CVE-2026-5387 Critical 9.3 AVEVA Pipeline Simulation Missing Authorization 0.4%
  • CVE-2026-1507 High 7.5 Uncaught Exception vulnerability in AVEVA PI Data Archive 0.3%
  • CVE-2026-1495 Medium 6.5 Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent 0.1%
  • CVE-2025-64769 High 7.1 AVEVA Process Optimization Cleartext Transmission of Sensitive Information 0.2%
  • CVE-2025-65117 High 7.4 AVEVA Process Optimization Use of Potentially Dangerous Function 0.2%
  • CVE-2025-64729 High 8.1 AVEVA Process Optimization Missing Authorization 0.2%
  • CVE-2025-65118 High 8.8 AVEVA Process Optimization Uncontrolled Search Path Element 0.3%
  • CVE-2025-61943 High 8.4 AVEVA Process Optimization SQL Injection 0.3%
  • CVE-2025-64691 High 8.8 AVEVA Process Optimization Code Injection 0.3%
  • CVE-2025-61937 Critical 10.0 AVEVA Process Optimization Code Injection 1.5%
  • CVE-2025-8386 Medium 6.9 AVEVA Application Server IDE Basic Cross-site Scripting 0.2%
  • CVE-2025-9317 High 8.4 AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm 0.1%
  • CVE-2025-54460 High 7.1 AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type 0.3%
  • CVE-2025-41415 Medium 6.5 AVEVA PI Integrator Insertion of Sensitive Information into Sent Data 0.4%
  • CVE-2025-36539 Medium 6.5 AVEVA PI Data Archive Uncaught Exception 0.4%
  • CVE-2025-36539 Medium 6.5 AVEVA PI Data Archive Uncaught Exception 0.4%
  • CVE-2025-44019 High 7.1 AVEVA PI Data Archive Uncaught Exception 0.5%
  • CVE-2025-44019 High 7.1 AVEVA PI Data Archive Uncaught Exception 0.5%
  • CVE-2025-2745 Medium 6.5 AVEVA PI Web API Cross-site Scripting 0.2%
  • CVE-2025-4418 Medium 4.4 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value 0.1%