Lucene search
K

7 matches found

OSV
OSV
added 2020/01/15 7:15 p.m.3 views

CVE-2019-18273

OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced...

4.8CVSS5.7AI score
Exploits0References1
CVE
CVE
added 2020/01/15 6:44 p.m.67 views

CVE-2019-18273

CVE-2019-18273 affects OSIsoft PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The root cause is Cross-Site Scripting (CWE-79) due to improper handling of input during web page generation. Impact per documents: potential to introduce invalid input via the affected web interface, with the CVSSv3 base...

4.8CVSS5AI score0.00279EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/05/25 3:29 p.m.6 views

CVE-2017-9641

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability...

8.8CVSS8.7AI score0.00158EPSS
Exploits0References3
Prion
Prion
added 2018/05/25 3:29 p.m.10 views

Cross site request forgery (csrf)

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability...

6.8CVSS7AI score0.00158EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2018/05/25 3:0 p.m.10 views

CVE-2017-9641

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability...

8.7AI score0.00158EPSS
Exploits0References3
CNVD
CNVD
added 2018/03/14 12:0 a.m.2 views

OSIsoft PI Vision Cross-Site Scripting Vulnerability

PI Vision is the leading visualization tool for quick, easy and secure access to all PI System™ data. A cross-site scripting vulnerability exists in OSIsoft PI Vision 2017 and prior versions, which can be exploited by remote attackers to inject arbitrary web script or HTML because the...

6.1CVSS6AI score0.0018EPSS
Exploits0References1
ICS
ICS
added 2018/03/13 12:0 a.m.55 views

OSIsoft PI Web API

CVSS v3 9.3 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: OSIsoft Equipment: PI Web API Vulnerabilities: Permissions, Privileges, and Access Controls; Cross-site Scripting AFFECTED PRODUCTS OSIsoft reports that the vulnerabilities affect the following PI Web API products: PI...

9.8CVSS7.9AI score0.00474EPSS
Exploits0References5
Rows per page
Query Builder