ICSA-25-317-02

icsaUScisa_csaf_ot

AVEVA Application Server IDE

view advisory published 2025-11-13

Successful exploitation of this vulnerability could allow an attacker to tamper with help files and inject cross-site scripting (XSS) code.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-8386US——
The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper with App Objects' help files and persist a cross-site script…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationApplication Server

    AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Users using affected product versions should apply security updates to mitigate the risk of exploit.

  • FixedApplication Server

    Audit assigned permissions to ensure that only trusted users are added to the "aaConfigTools" OS Group. For additional information on Application Server OS Security groups and accounts, see https://docs.aveva.com/bundle/sp-install/page/738031.html

    https://docs.aveva.com/bundle/sp-install/page/738031.html
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan