Approved changes feed: RSS · Atom

cpe:2.3:a:aveva:pi_connector_for_cygnet:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAveva (419325dd-398d-5d8e-98c9-e41c800a541d)
ProductPi Connector For Cygnet (5c955d6d-9f93-5097-80dd-351f3b12ab4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4418 vulnerable 2026-06-03 15:01:47.645353 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value
MEDIUM (4.4)
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) in a way that causes the connector service to become unresponsive.
Published: 2025-06-12T19:37:46.740Z
Updated: 2025-06-12T19:54:54.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4417 vulnerable 2026-06-03 15:01:47.644876 AVEVA PI Connector for CygNet Cross-site Scripting
MEDIUM (5.5)
A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit affected pages.
Published: 2025-06-12T19:32:32.628Z
Updated: 2025-06-12T19:57:09.559Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.