CVE-2017-9641

2017-06-1300:00:00

CWE-352

icscert

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.

CNA Affected

[
  {
    "product": "PI Coresight",
    "vendor": "OSIsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 R2 and earlier versions."
      }
    ]
  }
]