CVE-2021-42797: Aveva Edge

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.

Affected products

• Aveva Edge: before 2020 (fixed in 2020); version 2020 only

Published 2023-12-16. Last modified 2026-06-17.