CVE-2025-41415: high-severity vulnerability in AVEVA PI Integrator
AVEVA PI Integrator Insertion of Sensitive Information into Sent Data
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.4%
The vulnerability, if exploited, could allow an authenticated miscreant
(with privileges to access publication targets) to retrieve sensitive
information that could then be used to gain additional access to
downstream resources.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
AVEVA · PI IntegratorRelated CVEs — AVEVA PI Integrator
In the same product, most dangerous first.