CVE-2025-41415: Aveva Pi Integrator

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream resources.

Affected products

• Aveva Pi Integrator: before 2020 R2 SP1 (fixed in 2020 R2 SP1)

Published 2025-08-21. Last modified 2026-06-17.