CVE-2025-41415CWE-201

AVEVA PI Integrator Insertion of Sensitive Information into Sent Data

High · published August 21, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

The vulnerability, if exploited, could allow an authenticated miscreant

(with privileges to access publication targets) to retrieve sensitive

information that could then be used to gain additional access to

downstream resources.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-08-21T19:57Z
EPSS history
Timeline
  • 21 AUG 19:57Z
    AVEVA PI Integrator Insertion of Sensitive Information into Sent Data
    cvelistv5