Edge vulnerabilities

9 known vulnerabilities in Edge from AVEVA. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Edge: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-9317Nov 15, 2025AVEVA

  The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

• 7.1 High severity

  SystemPlatform: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2023-34982Nov 15, 2023AVEVA

  This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

• 7.8 High severity

  SystemPlatform: Execution with Unnecessary Privileges

  CVE-2023-33873Nov 15, 2023AVEVA

  This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.

• 7.8 High severity

  Edge: Missing User Interaction for Potentially Unsafe Action

  CVE-2022-36970Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa

• 7.1 High severity

  Edge: Improper Restriction of XML External Entity Reference

  CVE-2022-36969Mar 29, 2023AVEVAEPSS 13.7%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious pag

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28688Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28687Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Uncontrolled Search Path Element

  CVE-2022-28686Mar 29, 2023AVEVA

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope

• 7.8 High severity

  Edge: Deserialization of Untrusted Data

  CVE-2022-28685Mar 29, 2023AVEVAEPSS 17.2%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope