Known vulnerabilities in AVEVA Edge

Vendor: AVEVA Software, LLC.
Software: AVEVA Edge
Software CPE: cpe:2.3:a:aveva_software:indusoft_web_studio:*:*:*:*:*:*:*:*
Website: https://www.aveva.com/
Total vulnerabilities: 22
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AVEVA Edge AVEVA Edge is affected by 22 known vulnerabilities: 13 high, 4 medium, 5 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86031 - Uncontrolled Search Path Element
CVE-2023-6132		 CWE-427 Low
No
No
 2020 R2 SP2 P01, 2023 02.02.2024 SB2024020225
#VU83209 - External Control of File Name or Path
CVE-2023-34982		 CWE-73 Low
No
No
 2020 R2 SP2, 2023 15.11.2023 SB2023111543
#VU83208 - Execution with Unnecessary Privileges
CVE-2023-33873		 CWE-250 Low
No
No
 2020 R2 SP2, 2023 15.11.2023 SB2023111543
#VU69521 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42797		 CWE-22 High
No
No
 2020 R2 SP2 23.11.2022 SB2022112309
#VU69520 - Improper Access Control
CVE-2021-42796		 CWE-284 High
No
No
 2020 R2 SP2 23.11.2022 SB2022112309
#VU69519 - Exposure of sensitive information to an unauthorized actor
CVE-2021-42794		 CWE-200 Medium
No
No
 2020 R2 SP2 23.11.2022 SB2022112309
#VU66779 - Deserialization of Untrusted Data
CVE-2022-28685		 CWE-502 High
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU66778 - Uncontrolled Search Path Element
CVE-2022-28686		 CWE-427 Medium
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU66777 - Uncontrolled Search Path Element
CVE-2022-28687		 CWE-427 Medium
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU66776 - Uncontrolled Search Path Element
CVE-2022-28688		 CWE-427 Medium
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU66775 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-36969		 CWE-611 High
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU66774 - Insufficient UI Warning of Dangerous Operations
CVE-2022-36970		 CWE-357 High
No
No
 HF 2020.2.00.40 26.08.2022 SB2022082610
#VU17383 - Improper Control of Resource Identifiers ('Resource Injection')
CVE-2019-6545		 CWE-99 High
Available
No
 81.3.0 06.02.2019 SB2019020610
#VU17382 - Missing Authentication for Critical Function
CVE-2019-6543		 CWE-306 High
Available
No
 81.3.0 05.02.2019 SB2019020610
#VU15701 - Empty password in configuration file
CVE-2018-17914		 CWE-258 High
No
No
 8.1 SP2 02.11.2018 SB2018110209
#VU15700 - Stack-based buffer overflow
CVE-2018-17916		 CWE-121 High
No
No
 8.1 SP2 01.11.2018 SB2018110209
#VU13926 - Stack-based buffer overflow
CVE-2018-10620		 CWE-121 High
No
No
 81.1.00.08 19.07.2018 SB2018072005
#VU11894 - Stack-based buffer overflow
CVE-2018-8840		 CWE-121 High
No
No
 - 17.04.2018 SB2018041808
#VU9166 - Stack-based buffer overflow
CVE-2017-14024		 CWE-121 High
No
No
 - 09.11.2017 SB2017111002
#VU40450 - Improper input validation
CVE-2016-2542		 CWE-20 Low
No
No
 2020 R2 SP2 24.02.2016 SB2016022406
SB2022112309
SB2016062711


Showing elements 1 - 20 out of 22