Approved changes feed: RSS · Atom

cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:*

part: a version: 2020 update: -

VendorAveva (419325dd-398d-5d8e-98c9-e41c800a541d)
ProductSystem Platform (0fa5a432-4e77-56f7-8338-47a78ce8fb69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6132 not_vulnerable 2026-06-08 06:19:46.299910 AVEVA Edge products Uncontrolled Search Path Element
HIGH (7.3)
The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
Published: 2024-02-29T17:40:05.162Z
Updated: 2024-08-22T18:02:51.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34982 vulnerable 2026-06-08 06:06:26.316411 AVEVA Operations Control Logger External Control of File Name or Path
MEDIUM (5.5)
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Published: 2023-11-15T16:28:35.183Z
Updated: 2024-08-02T16:17:04.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33873 vulnerable 2026-06-08 06:06:23.684008 AVEVA Operations Control Logger Execution with Unnecessary Privileges
HIGH (7.8)
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Published: 2023-11-15T16:22:31.927Z
Updated: 2024-11-21T20:10:00.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0835 vulnerable 2026-06-08 05:39:11.280677 AVEVA System Platform Cleartext Storage of Sensitive Information in Memory
HIGH (8.1)
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user.
Published: 2022-04-11T19:38:30.000Z
Updated: 2025-04-16T17:56:24.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38410 vulnerable 2026-06-08 05:32:56.047358 AVEVA PCS Portal Uncontrolled Search Path Element
HIGH (7.3)
AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.
Published: 2022-07-27T20:23:04.000Z
Updated: 2025-04-17T15:49:43.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33010 vulnerable 2026-06-08 05:32:08.460978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33008 vulnerable 2026-06-08 05:32:08.459565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32985 vulnerable 2026-06-08 05:32:08.343333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32981 vulnerable 2026-06-08 05:32:08.338542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32977 vulnerable 2026-06-08 05:32:08.305450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.