GCVE - cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Aveva (`419325dd-398d-5d8e-98c9-e41c800a541d`)
Product	Edge (`4a856e45-7fb0-5c1e-8fda-21d2d5be94c3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9317`	vulnerable	2026-06-08 07:45:22.285568	AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm HIGH (8.4) The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes. Published: 2025-11-14T23:49:27.149Z Updated: 2025-11-17T16:55:20.081Z Open on db.gcve.eu Reference links https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-006.pdf https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34982`	vulnerable	2026-06-08 06:06:26.315355	AVEVA Operations Control Logger External Control of File Name or Path MEDIUM (5.5) This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service. Published: 2023-11-15T16:28:35.183Z Updated: 2024-08-02T16:17:04.179Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01 https://www.aveva.com/en/support-and-success/cyber-security-updates/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33873`	vulnerable	2026-06-08 06:06:23.669070	AVEVA Operations Control Logger Execution with Unnecessary Privileges HIGH (7.8) This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine. Published: 2023-11-15T16:22:31.927Z Updated: 2024-11-21T20:10:00.423Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01 https://www.aveva.com/en/support-and-success/cyber-security-updates/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36970`	vulnerable	2026-06-08 05:46:08.178427	Details available HIGH (7.8) This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of APP files. Crafted data in a APP file can cause the application to execute arbitrary Visual Basic scripts. The user interface fails to provide sufficient indication of the hazard. An attacker can leverage this vulnerability to execute code in the context of current process. Was ZDI-CAN-17370. Published: 2023-03-29T00:00:00.000Z Updated: 2025-02-18T20:01:03.094Z Open on db.gcve.eu Reference links https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2022-005.pdf https://www.zerodayinitiative.com/advisories/ZDI-22-1129/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36969`	vulnerable	2026-06-08 05:46:08.176972	Details available MEDIUM (5.5) This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the LoadImportedLibraries method. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the current process. Was ZDI-CAN-17394. Published: 2023-03-29T00:00:00.000Z Updated: 2025-02-18T16:43:19.184Z Open on db.gcve.eu Reference links https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2022-005.pdf https://www.zerodayinitiative.com/advisories/ZDI-22-1128/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28688`	vulnerable	2026-06-08 05:42:44.995610	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28687`	vulnerable	2026-06-08 05:42:44.995280	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28686`	vulnerable	2026-06-08 05:42:44.994834	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28685`	vulnerable	2026-06-08 05:42:44.993188	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42797`	vulnerable	2026-06-08 05:35:22.951365	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42796`	vulnerable	2026-06-08 05:35:22.950874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42794`	vulnerable	2026-06-08 05:35:22.948088	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.