Aveva Pi Connector For Cygnet vulnerabilities

2 CVEs affecting Aveva Pi Connector For Cygnet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4418, published 2025-06-12.

More from Aveva.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-4417, published 2025-06-12. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector…
• CVE-2025-4418, published 2025-06-12. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges…