Aveva Pi Server vulnerabilities

4 CVEs affecting Aveva Pi Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44019, published 2025-06-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34348, published 2024-01-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a…
CVE-2023-31274, published 2024-01-18. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory…
CVE-2025-44019, published 2025-06-12. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in…
CVE-2025-36539, published 2025-06-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in…