Aveva System Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:aveva:aveva_system_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aveva (419325dd-398d-5d8e-98c9-e41c800a541d) |
|---|---|
| Product | Aveva System Platform (0894fbb4-6a14-5528-979c-93d93cd31e1c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0835 |
vulnerable | 2026-06-03 14:45:57.218550 |
AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
HIGH (8.1)
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.
Published: 2022-04-11T19:38:30.000Z
Updated: 2025-04-16T17:56:24.023Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33010 |
vulnerable | 2026-06-03 14:44:40.757217 |
AVEVA System Platform Uncaught Exception
HIGH (7.5)
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.
Published: 2022-04-04T19:45:48.000Z
Updated: 2025-04-16T16:32:04.533Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33008 |
vulnerable | 2026-06-03 14:44:40.756171 |
AVEVA System Platform Missing Authentication for Critical Function
HIGH (8.8)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.
Published: 2022-04-04T19:45:51.000Z
Updated: 2025-04-16T17:56:37.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32985 |
vulnerable | 2026-06-03 14:44:40.640030 |
AVEVA System Platform Origin Validation Error
HIGH (7.2)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.
Published: 2022-04-04T19:45:49.000Z
Updated: 2025-04-16T17:56:55.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32981 |
vulnerable | 2026-06-03 14:44:40.636040 |
AVEVA System Platform Path Traversal
HIGH (7.2)
AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Published: 2022-04-04T19:45:50.000Z
Updated: 2025-04-16T17:56:47.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32977 |
vulnerable | 2026-06-03 14:44:40.594609 |
AVEVA System Platform Improper Verification of Cryptographic Signature
HIGH (7.2)
AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.
Published: 2022-04-04T19:45:47.000Z
Updated: 2025-04-16T17:57:07.061Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.