OSIsoft PI Web API Information Disclosure Vulnerability

PI is a real-time data history application from OSIsoft, and the PI Web API is the RESTful interface to the PI system. An information disclosure vulnerability exists in OSIsoft PI Web API 2018 and earlier versions, which stems from log files containing sensitive information. An attacker can explo...

OSIsoft PI Web API Cross-Site Scripting Vulnerability

The OSIsoft PI Web API is a product for accessing PI system data. A cross-site scripting vulnerability exists in OSIsoft PI Web API 2017 R2 and prior versions, which can be exploited by remote attackers to inject arbitrary web script or HTML...