CVE-2017-9655: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a...

OSIsoft PI Integrator Unauthorized Access Vulnerability

OSIsoft PI Integrator is a tool for visualizing data for external systems from OSIsoft, USA. An unauthorized access vulnerability exists in OSIsoft PI Integrator. An attacker could exploit this vulnerability to gain privileged access to the system...

OSIsoft PI Coresight Cross-Site Request Forgery Vulnerability

OSIsoft PI Coresight is a set of web-based tools for secure access to PI System data. A cross-site request forgery vulnerability exists in OSIsoft PI Coresight, which can be exploited by an attacker to perform unauthorized actions and gain access to affected applications due to an inability to...

OSIsoft PI Server Authentication Bypass Vulnerability (CNVD-2017-16358)

OSIsoft PI System is a set of data acquisition, analysis, and visualization software.PI Server is the core product of PI System.OSIsoft PI Data Archive is a storage and archiving component of PI Server for data retrieval through client software. An authentication bypass vulnerability exists in...

OSIsoft PI Web API Cross-Site Request Forgery Vulnerability

The OSIsoft PI Web API is a product for accessing PI system data. A cross-site request forgery vulnerability exists in the OSIsoft PI Web API. As the program fails to properly validate HTTP requests. An attacker could exploit the vulnerability to perform certain unauthorized actions and access th...

CVE-2017-5153

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...

Design/Logic Flaw

An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...

Design/Logic Flaw

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...

CVE-2016-8353

An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...

CVE-2017-5153

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...

CVE-2016-8353: Undefined Security Weakness

An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...

PT-2017-9631

Name of the Vulnerable Software and Affected Versions OSIsoft PI Web API version 1.5.1 Description An issue was discovered that may allow an attacker to access the PI system without the proper permissions due to a weakness in the product. Recommendations For version 1.5.1, at the moment, there is...

PT-2017-16347

Name of the Vulnerable Software and Affected Versions OSIsoft PI Coresight versions 2016 R2 and earlier OSIsoft PI Web API versions 2016 R2 and earlier Description An issue has been identified that may expose service account passwords through server log files, potentially leading to unauthorized...

CVE-2017-5153: Insertion of Sensitive Information into Log File

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...

OSIsoft PI System Local Denial of Service Vulnerability

OSIsoft PI Web API is a product from OSIsoft USA for accessing PI system data. A local denial of service vulnerability exists in OSIsoft PI System. An attacker could exploit this vulnerability to crash the affected application...

CVE-2016-4530

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

Design/Logic Flaw

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-4530

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

PT-2016-5996

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF Server versions prior to 2016 2.8.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a service outage, by sending a specific message. Recommendations For versions prior to 2016...