Aveva Edge (Formerly Known As Indusoft Web Studio) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Aveva Edge (Formerly Known As Indusoft Web Studio), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2023-34982avevaapplication server+21
EPSS score
0.22%
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.7.8CVE-2023-33873avevaapplication server+21
EPSS score
0.24%
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.