CVE-2020-12021

2020-06-2321:36:23

CWE-79

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code.

CNA Affected

[
  {
    "product": "OSIsoft PI Web API 2019",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-163-01