Aveva PI Connector For Cygnet vulnerabilities

2 vulnerabilities

Known vulnerabilities in Aveva PI Connector For Cygnet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7CVE-2025-4418avevapi connector for cygnet
EPSS score
0.10%
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) in a way that causes the connector service to become unresponsive.6.9CVE-2025-4417avevapi connector for cygnet
EPSS score
0.15%
A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit affected pages.