AVEVA Pipeline Integrity Monitor

CISA published a bulletin detailing four high-severity vulnerabilities in AVEVA Pipeline Integrity Monitor (affected versions up to 2025_SP1_P1_build_7.1.9580.8513) — including hard-coded cryptographic keys, weak cryptography, missing authorization, and XSS — that could lead to information disclosure, hash brute-force, unauthorized read access, or arbitrary code execution in browser sessions; CVSSv3 score noted as 8.4, mitigations and recommended defensive practices are provided, and no known public exploitation has been reported.