Aveva System Platform vulnerabilities
6 vulnerabilities
Known vulnerabilities in Aveva System Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-32981avevaaveva system platform+1
EPSS score1.21%
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.CVE-2021-32985avevaaveva system platform+1EPSS score0.50%
AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.CVE-2021-32977avevaaveva system platform+1EPSS score0.64%
AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.CVE-2021-33010avevaaveva system platform+1EPSS score1.07%
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.CVE-2021-33008avevaaveva system platform+1EPSS score1.15%
AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.CVE-2022-0835avevaaveva system platform+1EPSS score0.17%
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.