Xylem security advisories
The Xylem security advisories page provides current and historical product security advisories (PSAs) and customer security advisories (CSAs) that may affect Xylem systems, solutions, or infrastructure. Each advisory outlines identified vulnerabilities, associated CVEs, and recommended actions to help customers and partners assess and manage security risks across Xylem products and systems. Our commitment to security and trust means we aim to ensure our customers and partners are equipped with the knowledge they need to manage risk effectively.
PSA – Product Security Advisory | CSA – Customer Security Advisory
ID
|
Title
|
Type
|
Published
|
Updated
|
|
XPSA-2024-015
|
Disclosure of Sensus wM-Bus Default Encryption Key:
|
PSA
|
November 20, 2024
|
|
|
XPSA-2024-001
|
CVE-2024-6387 Open SSH
|
PSA
|
July 9, 2024
|
|
|
XPSA-2023-014
|
CVE-2023-46604 for Sensus RNI
|
PSA
|
November 16, 2023
|
-
|
|
XPSA-2022-012
|
OpenSSL Vulnerabilities
|
PSA
|
November 4, 2022
|
November 8, 2022
|
|
XPSA-2022-011
|
CISA Emergency Directive for VMware Vulnerabilities
|
PSA
|
May 24, 2022
|
-
|
|
XPSA-2022-010
|
Eurotech Vulnerability for Xylem Edge Gateway
|
PSA
|
May 26, 2022
|
-
|
|
XPSA-2022-009
|
Sensus Analytics Login Service Vulnerability
|
PSA
|
May 25, 2022
|
-
|
|
XPSA-2022-008
|
Spring4Shell Vulnerability
|
PSA
|
April 7, 2022
|
May 17, 2022
|
|
XPSA-2022-007
|
AVEVA Web Studio Vulnerability for AquaView On-Premise
|
PSA
|
March 16, 2022
|
-
|
|
XSA-2022-005
|
CISA Shields Up Advisory
|
CSA
|
February 16, 2022
|
February 28, 2022
|
|
XPSA-2021-004
|
AquaView Hardcoded Credentials Vulnerability
|
PSA
|
December 16, 2021
|
-
|
|
XSA-2021-005
|
Apache Log4j Vulnerability
|
PSA
|
December 14, 2021
|
May 18, 2022
|
|
XSA-2021-003
|
Aanderaa GeoView SQL Injection Vulnerability
|
PSA
|
November 30, 2021
|
-
|
|
XSA-2021-002
|
Rockwell ISaGRAF Runtime vulnerabilities for Flygt MultiSmart
|
PSA
|
June 8, 2021
|
-
|
|
XSA-2021-001
|
Oldsmar, Florida Water Treatment Plant Cyber Attack
|
CSA
|
February 8, 2021
|
-
|
|
XSA-2020-001
|
Solarwinds Orion Vulnerability
|
CSA
|
December 17, 2020
|
-
|
|
XSA-2019-001
|
Wind River VxWorks Vulnerabilities
|
PSA
|
August 14, 2019
|
August 28, 2019
|