Process Optimization (Aveva) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-01-16. Vendor: Aveva.
CVEs of Process Optimization
- CVE-2025-65118 - CVSS 9.3 (critical), 2026-01-16: The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into loading arbitrary code…
- CVE-2025-64729 - CVSS 8.6 (high), 2026-01-16: The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optimization project files, embed code, and…
- CVE-2025-64691 - CVSS 9.3 (critical), 2026-01-16: The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scripts and escalate privileges to OS…
- CVE-2025-65117 - CVSS 8.5 (high), 2026-01-16: The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate…
- CVE-2025-61943 - CVSS 9.3 (critical), 2026-01-16: The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and…
- CVE-2025-64769 - CVSS 7.6 (high), 2026-01-16: The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subject to hijacking or…
- CVE-2025-61937 - CVSS 10 (critical), 2026-01-16: The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service,…
