osisoft pi vision vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

OSIsoft PI Vision 2020 versions before 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.

Osisoft Pi Vision

7.3

CVSSv3

A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions before 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected displ...

Osisoft Pi Vision

5.4

CVSSv3

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System d...

Osisoft Pi Vision

4.3

CVSSv3

PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.

Osisoft Pi Vision

5.4

CVSSv3

An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party component.

Osisoft Pi Vision 2019

4.8

CVSSv3

In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display.

Osisoft Pi Vision

4.7

CVSSv3

In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue.

Osisoft Pi Vision 2017 Osisoft Pi Vision 2019

8.8

CVSSv3

OSIsoft PI Vision, All versions of PI Vision before 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.

Osisoft Pi Vision

4.8

CVSSv3

OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.

Osisoft Pi Vision 2017

6.5

CVSSv3

OSIsoft PI Vision, All versions of PI Vision before 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.

Osisoft Pi Vision

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook