323 matches found
CVE-2017-9655
A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a...
CVE-2017-9653
An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized...
OSIsoft PI Integrator Unauthorized Access Vulnerability
OSIsoft PI Integrator is a tool for visualizing data for external systems from OSIsoft, USA. An unauthorized access vulnerability exists in OSIsoft PI Integrator. An attacker could exploit this vulnerability to gain privileged access to the system...
OSIsoft PI Integrator
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI Integrator Vulnerabilities: Cross-Site Scripting, Improper Authorization AFFECTED PRODUCTS The following versions of PI Integrator, a data management platform, are affected: PI Integrator for SAP...
OSIsoft PI ProcessBook and PI ActiveView Arbitrary Code Execution Vulnerability
PI-ProcessBook is a powerful tool for displaying real-time data collected and stored by the PI system.PI-ActiveView is a Miscellaneous Shareware software. An arbitrary code execution vulnerability exists in OSIsoft PI ProcessBook and PI ActiveView, which can be exploited by attackers to execute...
OSIsoft PI Coresight Cross-Site Request Forgery Vulnerability
OSIsoft PI Coresight is a set of web-based tools for secure access to PI System data. A cross-site request forgery vulnerability exists in OSIsoft PI Coresight, which can be exploited by an attacker to perform unauthorized actions and gain access to affected applications due to an inability to...
OSIsoft PI ProcessBook and PI ActiveView
CVSS v3 High ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI ProcessBook and PI ActiveView Vulnerability: Using components with known vulnerabilities AFFECTED PRODUCTS OSIsoft reports that the vulnerability affects the following PI products: PI ProcessBoo...
OSIsoft PI Coresight
CVSS v3 7.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI Coresight Vulnerability: Cross-Site Request Forgery AFFECTED PRODUCTS OSIsoft reports that the vulnerability affects the following PI Coresight products: PI Coresight 2016 R2 and earlier versions...
OSIsoft PI Server Authentication Bypass Vulnerability (CNVD-2017-16358)
OSIsoft PI System is a set of data acquisition, analysis, and visualization software.PI Server is the core product of PI System.OSIsoft PI Data Archive is a storage and archiving component of PI Server for data retrieval through client software. An authentication bypass vulnerability exists in...
OSIsoft PI Server Authentication Bypass Vulnerability
OSIsoft PI System is a set of data acquisition, analysis, and visualization software.PI Server is the core product of PI System.OSIsoft PI Data Archive is a storage and archiving component of PI Server for data retrieval through client software. An authentication bypass vulnerability exists in...
OSIsoft PI Web API Cross-Site Request Forgery Vulnerability
The OSIsoft PI Web API is a product for accessing PI system data. A cross-site request forgery vulnerability exists in the OSIsoft PI Web API. As the program fails to properly validate HTTP requests. An attacker could exploit the vulnerability to perform certain unauthorized actions and access th...
OSIsoft PI Web API 2017
CVSS v3 7.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI Web API 2017 Vulnerability: Cross-Site Request Forgery AFFECTED PRODUCTS OSIsoft reports that the vulnerability affects the following PI Web API products: PI Web API versions prior to 2017 1.9.0...
OSIsoft PI Server 2017
CVSS v3 8.9 ATTENTION: Remotely exploitable. Vendor: OSIsoft Equipment: PI Server 2017 Vulnerabilities: Improper Authentication AFFECTED PRODUCTS OSIsoft reports that the vulnerabilities affect the following PI Server products: PI Data Archive versions prior to 2017. IMPACT Successful exploitatio...
CVE-2017-5153
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...
CVE-2017-5153
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...
CVE-2016-8353
An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...
CVE-2016-8353
An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...
CVE-2016-8353
An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...
Design/Logic Flaw
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...
Design/Logic Flaw
An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...