2074 matches found
Cross site scripting
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced...
Improper access control
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes...
CVE-2019-18244
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue...
CVE-2019-18273
CVE-2019-18273 affects OSIsoft PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The root cause is Cross-Site Scripting (CWE-79) due to improper handling of input during web page generation. Impact per documents: potential to introduce invalid input via the affected web interface, with the CVSSv3 base...
CVE-2019-18273
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced...
CVE-2019-18271
CVE-2019-18271 affects OSIsoft PI Vision (all PI Vision versions prior to 2019) and describes a Cross-Site Request Forgery (CSRF) vulnerability introduced on the PI Vision administration site. The issue is classified under CSRF (CWE-352) with a CVSSv3 base score around 7.1 (vector: AV:N/AC:L/PR:N...
CVE-2019-18271
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site...
CVE-2019-18275
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes...
CVE-2019-18275
OSIsoft PI Vision (all PI Vision versions prior to 2019) is affected by CVE-2019-18275 due to improper access control that may return unauthorized tag data when viewing analysis data reference attributes. The Red Hat entry confirms the specific vulnerability class and impact, and the CISA advisor...
OSIsoft PI Vision Access Control Error Vulnerability
OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. The OSIsoft PI Vision Access Control Error vulnerability can be exploited by an attacker to return unauthorized tagged...
OSIsoft PI Vision Cross-Site Request Forgery Vulnerability
OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site request forgery vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to...
OSIsoft PI Vision Cross-Site Scripting Vulnerability
OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. A cross-site scripting vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to cause the...
OSIsoft PI Vision Information Disclosure Vulnerability
OSIsoft PI Vision is a set of commercialized software application platform based on Ckient/Server structure from OSIsoft, supporting data acquisition, analysis and visualization. An information disclosure vulnerability exists in OSIsoft PI Vision, which can be exploited by an attacker to obtain a...
OSIsoft PI Vision
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft LLC Equipment: PI Vision Vulnerabilities: Improper Access Control, Cross-site Request Forgery CSRF, Cross-site Scripting, Inclusion of Sensitive Information in Log Files 2. RISK EVALUATION...
CVE-2020-6848
Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...
CVE-2020-6848
Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...
CVE-2020-6848
Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...
Design/Logic Flaw
Axper Vision II 4 devices allow XSS via the DEVICENAME aka Device Name parameter to the configWebParams.cgi URI...
CVE-2020-6848
Axper Vision II 4 devices contain a cross-site scripting (XSS) vulnerability via the DEVICE_NAME parameter to the configWebParams.cgi URI. The available documents repeat this description but provide no affected firmware versions, root-cause details, exploit information, or remediation steps. Ther...