Aveva Edge vulnerabilities

7 known vulnerabilities in Aveva Edge from AVEVA. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  AVEVA Edge: Uncontrolled Search Path Element

  CVE-2023-6132Feb 29, 2024AVEVA

  The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

• 7.8 High severity

  Edge: Missing User Interaction for Potentially Unsafe Action

  CVE-2022-36970Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa

• 7.1 High severity

  Edge: Improper Restriction of XML External Entity Reference

  CVE-2022-36969Mar 29, 2023AVEVAEPSS 13.7%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious pag

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28688Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28687Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28686Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Deserialization of Untrusted Data

  CVE-2022-28685Mar 29, 2023AVEVAEPSS 17.2%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope