CVE-2025-65117 - CVE House
Back to Database
Status published High CVE-2025-65117

AVEVA Process Optimization Use of Potentially Dangerous Function

Vulnerability Description

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-65117

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Christopher Wu of Veracode reported these vulnerabilities to AVEVA.

References

More from AVEVA

View All →
CVE-2025-9317
AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm
High 8.3
CVE-2025-8386
AVEVA Application Server IDE Basic Cross-site Scripting
High 7.2
CVE-2025-65118
AVEVA Process Optimization Uncontrolled Search Path Element
Critical 9.3
CVE-2025-64769
AVEVA Process Optimization Cleartext Transmission of Sensitive Information
High 7.6
CVE-2025-64729
AVEVA Process Optimization Missing Authorization
High 8.6

Affected Vendor

Affected Software

Process Optimization
Vulnerable Versions:
0

Timeline

Official Publish: January 16th, 2026
Last Modified: January 16th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Weaknesses (CWE)

CWE-676

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.