Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-54460

AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type

Description

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist files that could potentially be executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVEVA PI Integrator

Default version status: unaffected

  • 0 to < 2020 R2 SP1affected

References