Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-4417

AVEVA PI Connector for CygNet Cross-site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit affected pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVEVA PI Connector for CygNet

Default version status: unaffected

  • 0 to ≤ 1.6.14affected

References