Aveva Reports For Operations 2023 vulnerabilities

2 CVEs affecting Aveva Reports For Operations 2023, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6619, published 2024-08-13.

More from Aveva.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-6618, published 2024-08-13. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).
• CVE-2024-6619, published 2024-08-13. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service.