Vendor

    AVEVA

    91 known vulnerabilities in products by AVEVA, 0 of them actively exploited (CISA KEV).

    Key figures

    91

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    21

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in AVEVA
    CriticalCVE-2019-6543

    Aveva InduSoft Web Studio: Missing Authentication for Critical Function

    also in 1 other product

    		9.8
    CriticalCVE-2018-10628

    AVEVA Software, LLC. InTouch: Stack-based Buffer Overflow

    also in 1 other product

    		9.8
    HighCVE-2022-23854

    AVEVA InTouch Access Anywhere: Relative Path Traversal

    		7.5
    HighCVE-2022-28685

    AVEVA Edge: Deserialization of Untrusted Data

    		7.8
    CriticalCVE-2018-17914

    Aveva InduSoft Web Studio: Empty Password in Configuration File

    		9.8
    CriticalCVE-2018-10620

    AVEVA Software InduSoft Web Studio: Stack-based Buffer Overflow

    also in 1 other product

    		9.8
    CriticalCVE-2018-17916

    Aveva InduSoft Web Studio: Stack-based Buffer Overflow

    		9.8
    HighCVE-2019-6545

    Aveva InduSoft Web Studio: Resource Injection

    also in 1 other product

    		7.5
    CriticalCVE-2020-13500

    Aveva: SQL Injection

    		9.8
    CriticalCVE-2020-13499

    Aveva: SQL Injection

    		9.8
    CriticalCVE-2020-13501

    Aveva: SQL Injection

    		9.8
    CriticalCVE-2025-61937

    AVEVA Process Optimization Code Injection

    		10.0
    CriticalCVE-2017-5158

    Schneider Electric Wonderware InTouch Access Anywhere: Information Disclosure

    		9.8
    HighCVE-2022-36969

    AVEVA Edge: Improper Restriction of XML External Entity Reference

    		5.5
    CriticalCVE-2021-42796

    AVEVA Edge: security vulnerability

    		9.8
    CriticalCVE-2020-13505

    Aveva: SQL Injection

    		9.8
    CriticalCVE-2020-13504

    Aveva: SQL Injection

    		9.8
    HighCVE-2019-6525

    AVEVA Wonderware System Platform: Insufficiently Protected Credentials

    		8.8
    HighCVE-2017-6021

    Schneider Electric ClearSCADA: Improper Input Validation

    also in 2 other products

    		7.5
    CriticalCVE-2021-33008

    AVEVA System Platform Missing Authentication for Critical Function

    		8.8
    HighCVE-2019-13537

    AVEVA Vijeo Citect and Citect SCADA: Stack-based Buffer Overflow

    		7.5
    HighCVE-2025-7639

    AVEVA Enterprise SCADA Deserialization of Untrusted Data

    		7.1
    HighCVE-2017-5156

    Schneider Electric Wonderware InTouch Access Anywhere: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2021-32981

    AVEVA System Platform Path Traversal

    		7.2
    CriticalCVE-2023-1256

    AVEVA Plant SCADA: Improper Access Control

    		9.8

    All vulnerabilities in search

    Products

    Products by AVEVA
    AVEVA Edge140
    Process Optimization140
    AVEVA Edge110
    AVEVA System Platform90
    Schneider Electric ClearSCADA90
    Aveva System Platform60
    Batch Management60
    Pi Server60
    Suitelink60
    Aveva50
    Aveva InduSoft Web Studio50
    AVEVA Telemetry Server50
    Application Server40
    AVEVA InTouch40
    Aveva InTouch Machine Edition 201440
    Pipeline Integrity Monitor40
    Recipe Management40
    AVEVA Historian30
    AVEVA InTouch Access Anywhere30
    Communication Drivers Pack30
    Manufacturing Execution System30
    Mobile Operator30
    Schneider Electric Wonderware InTouch Access Anywhere30
    Work Tasks30