CVE-2025-54460CWE-434

AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type

High · published August 21, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

The vulnerability, if exploited, could allow an authenticated miscreant

(with privileges to create or access publication targets of type Text

File or HDFS) to upload and persist files that could potentially be

executed.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-08-21T20:00Z
EPSS history
Timeline
  • 21 AUG 20:00Z
    AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type
    cvelistv5