Aveva Pi Integrator vulnerabilities

2 CVEs affecting Aveva Pi Integrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-54460, published 2025-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-41415, published 2025-08-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional…
CVE-2025-54460, published 2025-08-21. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist files that could…