How severe is CVE-2025-65117?

CVE-2025-65117 has a CVSS 3.x base score of 7.4, rated high severity. It is exploitable over local access with low attack complexity, requires high privileges and user interaction. Impact on confidentiality is high, integrity high, and availability none.

Is CVE-2025-65117 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (10th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-65117?

CVE-2025-65117 affects Aveva Process Optimization. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-65117?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-65117 have an EU (EUVD) identifier?

Yes. CVE-2025-65117 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-2992.

When was CVE-2025-65117 published?

CVE-2025-65117 was published on 2026-01-16 and last updated on 2026-06-17.

CVE-2025-65117

CVE-2025-65117 is a high-severity vulnerability in Aveva Process Optimization with a CVSS 3.x base score of 7.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-676.

Key facts

Severity: High (CVSS 3.x base score 7.4)
CVSS v4: 8.5
EPSS exploit prediction: 0% (10th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-2992
Weakness: CWE-676
Affected product: Aveva Process Optimization
Published: 2026-01-16
Last modified: 2026-06-17

Description

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.

Frequently asked questions

What is CVE-2025-65117?: The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.
How severe is CVE-2025-65117?: CVE-2025-65117 has a CVSS 3.x base score of 7.4, rated high severity. It is exploitable over local access with low attack complexity, requires high privileges and user interaction. Impact on confidentiality is high, integrity high, and availability none.
Is CVE-2025-65117 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (10th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-65117?: CVE-2025-65117 affects Aveva Process Optimization. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-65117?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-65117 have an EU (EUVD) identifier?: Yes. CVE-2025-65117 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-2992.
When was CVE-2025-65117 published?: CVE-2025-65117 was published on 2026-01-16 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:aveva:process_optimization:*:*:*:*:*:*:*:*

More vulnerabilities in Aveva Process Optimization

CVE-2025-61937 — Critical (CVSS 10.0): The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS…
CVE-2025-65118 — High (CVSS 8.8): The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process…
CVE-2025-64691 — High (CVSS 8.8): The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro…
CVE-2025-61943 — High (CVSS 8.4): The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper…
CVE-2025-64729 — High (CVSS 8.1): The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process…
CVE-2025-64769 — High (CVSS 7.1): The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted…

All CVEs affecting Aveva Process Optimization →

Other CWE-676 vulnerabilities

CVE-2021-27474 — Critical (CVSS 10.0): Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS…
CVE-2022-39063 — High (CVSS 7.5): When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session…
CVE-2024-38434 — Medium (CVSS 6.5): Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
CVE-2024-50307 — Medium (CVSS 5.5): Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2.…
CVE-2025-67604 — Medium (CVSS 5.3): A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
CVE-2024-37387 — Medium (CVSS 4.0): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is…

Browse all CWE-676 vulnerabilities →