Known vulnerabilities in AVEVA PI Web API

Vendor: AVEVA Software, LLC.
Software: AVEVA PI Web API
Software CPE: cpe:2.3:a:aveva_software:aveva_pi_web_api:*:*:*:*:*:*:*:*
Website: https://www.aveva.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AVEVA PI Web API AVEVA PI Web API is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2745		 CWE-79 Low
No
No
 2023 SP1 Patch 1 16.06.2025 SB2025061607
#VU91986 - Deserialization of Untrusted Data
CVE-2024-3468		 CWE-502 Medium
No
No
 2023 SP1 12.06.2024 SB2024061218