Osisoft Pi Vision
15 CVEs affecting Osisoft Pi Vision. Latest disclosed: 2022-04-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7500 | Critical | 9.8 | 2018-03-14 | A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attac… |
CVE-2019-18271 | High | 8.8 | 2020-01-15 | OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI… |
CVE-2020-25163 | High | 7.7 | 2022-04-18 | A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorize… |
CVE-2021-43551 | Medium | 6.5 | 2021-11-17 | A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible i… |
CVE-2020-10643 | Medium | 6.5 | 2020-07-27 | An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in… |
CVE-2019-18275 | Medium | 6.5 | 2020-01-15 | OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag… |
CVE-2018-7508 | Medium | 6.1 | 2018-03-14 | A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutrali… |
CVE-2018-7504 | Medium | 6.1 | 2018-03-14 | A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, all… |
CVE-2018-7496 | Medium | 5.3 | 2018-03-14 | An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header and referrer-policy response header each… |
CVE-2020-25167 | Medium | 4.9 | 2022-04-18 | OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. |
CVE-2020-10614 | Medium | 4.8 | 2020-07-25 | In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display… |
CVE-2019-18273 | Medium | 4.8 | 2020-01-15 | OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be… |
CVE-2018-19006 | Medium | 4.8 | 2019-04-08 | OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference… |
CVE-2019-18244 | Medium | 4.7 | 2020-01-15 | In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during… |
CVE-2021-43553 | Low | 3.1 | 2021-11-17 | PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a L… |