Security information and guidance
- Last UpdatedOct 29, 2025
- 1 minute read
AVEVA is committed to releasing secure products. This section is intended to provide relevant security-related information to guide your installation or upgrade decision.
AVEVA proactively discloses aggregate information about the number and severity of security vulnerabilities addressed in each release. The table below provides an overview of security issues mitigated and their relative severity based on standard scoring.
Security vulnerabilities mitigated
The following vulnerabilities were identified for mitigation in this release.
|
Component |
Version |
CVE or Reference |
CVSS |
Mitigation |
|
IdentityServer3.AccessTokenValidation |
2.14.0 |
CVE-2017-12677 |
6.1 |
MES uses IdentityServer in its Web API, however MES Web API does not serve pages, therefore the product is not directly exposed to this vulnerability. |
|
Microsoft Web Deploy |
3.5 |
CVE-2025-53772 |
8.8 |
Prior to installing MES, complete the following:
|