PT-2025-34290 · Aveva · Ie Integrator+1

Adam Bertrand + 1 · Published 2025-08-12 · Updated 2025-08-21 · CVE-2025-41415

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: (affected versions not specified)

Description: The vulnerability, if exploited, could allow an authenticated attacker with privileges to access publication targets to retrieve sensitive information that could then be used to gain additional access to downstream resources.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-201

Related Identifiers

BDU:2026-00075

CVE-2025-41415

Affected Products

Ie Integrator

Pi Integrator For Business Analytics

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-41415 · Security Note
• https://bdu.fstec.ru/vul/2026-00075 · Security Note
• https://twitter.com/CVEnew/status/1958624562293481590 · Twitter Post
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-224-04 · Note