OSIsoft PI AF Server prior to 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.
osisoft pi af server 2016