Vendors › AVEVA

AVEVA security advisories

2 CISA ICS advisories for AVEVA in the last tracking window, 2 flagged as relevant to oil & gas. Newest first.

High 8.4 Oil & gas relevant ICSA-26-253-01 · Sep 10, 2026 · AVEVA

AVEVA Pipeline Integrity Monitor

CISA reports 4 vulnerabilities in AVEVA Pipeline Integrity Monitor. Weakness types: Use of Hard-coded Cryptographic Key, Use of a Broken or Risky Cryptographic Algorithm, Missing Authorization (+1 more). Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes…

What to do: Prioritize: AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation.
High 7.1 Oil & gas relevant ICSA-26-225-01 · Aug 13, 2026 · AVEVA

AVEVA Enterprise SCADA

CISA reports 1 vulnerability in AVEVA Enterprise SCADA, Enterprise SCADA HMI. Weakness type: Deserialization of Untrusted Data. Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization. Highest CVSS v3 score: 7.1…

What to do: Prioritize: AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit: 1.