Cross site scripting

2020-06-2322:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code.

CPENameOperatorVersion
pi_web_apieq2019 patch-1
pi_web_apile2019

CPE	Name	Operator	Version
	pi_web_api	eq	2019 patch-1
	pi_web_api	le	2019

References

www.us-cert.gov/ics/advisories/icsa-20-163-01