Aveva Application Server vulnerabilities

4 vulnerabilities

Known vulnerabilities in Aveva Application Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2025-8386avevaapplication server
EPSS score
0.17%
The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper with App Objects' help files and persist a cross-site scripting (XSS) injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The vulnerability can only be exploited during config-time operations within the IDE component of Application Server. Run-time components and operations are not affected.8.7CVE-2024-7113avevaapplication server+5
EPSS score
0.50%
If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.7.1CVE-2023-34982avevaapplication server+21
EPSS score
0.22%
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.7.8CVE-2023-33873avevaapplication server+21
EPSS score
0.24%
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.