CVE-2019-18275

OSIsoft PI Vision (all PI Vision versions prior to 2019) is affected by CVE-2019-18275 due to improper access control that may return unauthorized tag data when viewing analysis data reference attributes. The Red Hat entry confirms the specific vulnerability class and impact, and the CISA advisor...

OSIsoft PI Vision Cross-Site Scripting Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site scripting vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to cause the...

OSIsoft PI Vision Cross-Site Request Forgery Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site request forgery vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to...

OSIsoft PI Vision Information Disclosure Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. An information disclosure vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to obtain a...

OSIsoft PI Vision Access Control Error Vulnerability

OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. The OSIsoft PI Vision Access Control Error vulnerability can be exploited by an attacker to return unauthorized tagged...

OSIsoft PI Vision

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft LLC Equipment: PI Vision Vulnerabilities: Improper Access Control, Cross-site Request Forgery CSRF, Cross-site Scripting, Inclusion of Sensitive Information in Log Files 2. RISK EVALUATION...

OSIsoft PI SQL Client

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: OSIsoft LLC Equipment: OSIsoft PI SQL Client Vulnerability: Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code execution or cause a denial of service,...

CVE-2019-13515

OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information...

CVE-2019-13516

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect...

CVE-2019-13515

OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information...

CVE-2019-13516

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect...

Cross site request forgery (csrf)

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect...

Information disclosure

OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information...

CVE-2019-13516

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect...

CVE-2019-13516

CVE-2019-13516 affects OSIsoft PI Web API (and prior versions). The issue is a cross-site request forgery protection setting that has not taken effect, leaving the PI Web API vulnerable to direct attack. Affected products include PI Web API 2018 and earlier versions. Exploitation details are not ...

CVE-2019-13515

OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information...

CVE-2019-13515

CVE-2019-13515 affects OSIsoft PI Web API 2018 and earlier, enabling disclosure of sensitive information via log files (CWE-532). The vulnerability exists in the PI Web API REST interface and is driven by how logs may contain sensitive data. Affected versions are PI Web API 2018 and prior. Remedi...

PT-2019-13382 · Osisoft · Osisoft Pi Web Api

Name of the Vulnerable Software and Affected Versions: OSIsoft PI Web API versions prior to the fixed version Description: The issue is related to a cross-site request forgery protection setting that has not taken effect, making the affected product vulnerable to a direct attack. Recommendations:...

OSIsoft PI Web API Information Disclosure Vulnerability

PI is a real-time data history application from OSIsoft, and the PI Web API is the RESTful interface to the PI system. An information disclosure vulnerability exists in OSIsoft PI Web API 2018 and earlier versions, which stems from log files containing sensitive information. An attacker can explo...

OSIsoft PI Cross-Site Request Forgery Vulnerability

OSIsoft PI is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, USA. The platform supports data acquisition, analysis and visualization. A cross-site request forgery vulnerability exists in the OSIsoft PI Web API 2018 and prior versions, which ca...