← back
CVE-2025-41415

AVEVA PI Integrator Insertion of Sensitive Information into Sent Data

CVSS 7.1 HIGHEPSS 0.3%CWE-201
The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream resources.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
AVEVA · PI Integrator

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →