Osisoft Pi Vision
6 CVEs affecting Osisoft Pi Vision. Latest disclosed: 2022-04-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25163 | High | 7.7 | 2022-04-18 | A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorize… |
CVE-2021-43551 | Medium | 6.5 | 2021-11-17 | A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible i… |
CVE-2020-10643 | Medium | 6.5 | 2020-07-27 | An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in… |
CVE-2020-25167 | Medium | 4.9 | 2022-04-18 | OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. |
CVE-2018-19006 | Medium | 4.8 | 2019-04-08 | OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference… |
CVE-2021-43553 | Low | 3.1 | 2021-11-17 | PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a L… |