Approved changes feed: RSS · Atom

cpe:2.3:a:aveva:aveva_system_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAveva (419325dd-398d-5d8e-98c9-e41c800a541d)
ProductAveva System Platform (0894fbb4-6a14-5528-979c-93d93cd31e1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0835 vulnerable 2026-06-08 05:39:11.279683 AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
HIGH (8.1)
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.
Published: 2022-04-11T19:38:30.000Z
Updated: 2025-04-16T17:56:24.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33010 vulnerable 2026-06-08 05:32:08.460806 AVEVA System Platform Uncaught Exception
HIGH (7.5)
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.
Published: 2022-04-04T19:45:48.000Z
Updated: 2025-04-16T16:32:04.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33008 vulnerable 2026-06-08 05:32:08.459495 AVEVA System Platform Missing Authentication for Critical Function
HIGH (8.8)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.
Published: 2022-04-04T19:45:51.000Z
Updated: 2025-04-16T17:56:37.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32985 vulnerable 2026-06-08 05:32:08.343279 AVEVA System Platform Origin Validation Error
HIGH (7.2)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.
Published: 2022-04-04T19:45:49.000Z
Updated: 2025-04-16T17:56:55.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32981 vulnerable 2026-06-08 05:32:08.338487 AVEVA System Platform Path Traversal
HIGH (7.2)
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Published: 2022-04-04T19:45:50.000Z
Updated: 2025-04-16T17:56:47.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32977 vulnerable 2026-06-08 05:32:08.303898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.