Known vulnerabilities in AVEVA System Platform
Vendor:
AVEVA Software, LLC.
Software:
AVEVA System Platform
Software CPE:
cpe:2.3:a:aveva_software:aveva_system_platform:*:*:*:*:*:*:*:*
Website:
https://www.aveva.com/
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61182 - Cleartext Storage of Sensitive Information CVE-2022-0835 |
CWE-312 | Low | 2020 P01, 2020 R2 SP1 | 09.03.2022 |
SB2022030901 |
||
| #VU56440 - Uncontrolled Search Path Element CVE-2021-38410 |
CWE-427 | Low | - | 10.09.2021 |
SB2021091003 |
||
| #VU56003 - Improper Handling of Exceptional Conditions CVE-2021-32999 |
CWE-755 | Medium | - | 20.08.2021 |
SB2021082003 |
||
| #VU56002 - NULL Pointer Dereference CVE-2021-32987 |
CWE-476 | Medium | - | 20.08.2021 |
SB2021082003 |
||
| #VU56001 - NULL Pointer Dereference CVE-2021-32971 |
CWE-476 | Medium | - | 20.08.2021 |
SB2021082003 |
||
| #VU55999 - NULL Pointer Dereference CVE-2021-32979 |
CWE-476 | Medium | - | 20.08.2021 |
SB2021082003 |
||
| #VU55997 - Heap-based Buffer Overflow CVE-2021-32959 |
CWE-122 | High | - | 20.08.2021 |
SB2021082003 |
||
| #VU54467 - Uncaught Exception CVE-2021-33010 |
CWE-248 | Medium | 2020 R2.1 | 30.06.2021 |
SB2021063022 |
||
| #VU54466 - Missing Authentication for Critical Function CVE-2021-33008 |
CWE-306 | Low | 2020 R2.1 | 30.06.2021 |
SB2021063022 |