https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:50:23.321589+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-3468 CVE-2024-3468 — Deserialization of Untrusted Data in AVEVA PI Web API 2026-09-28T16:50:23.327521+00:00

Affected: AVEVA PI Web API

There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker.

 https://vulnerability.circl.lu/vuln/icsa-24-163-02 ICSA-24-163-02 — AVEVA PI Web API 2026-09-28T16:50:23.327787+00:00

There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker.