PV
Product
PI Vision
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 12Low 0
Watch
Add PI Vision to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7500 | 9.8 | Mar 14 | A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior Affected: 2017 |
| CVE-2019-18271 | 8.8 | Jan 15 | OSIsoft PI Vision, All versions of PI Vision prior to 2019 Affected: before 2019 |
| CVE-2020-25163 | 7.3 | Apr 18 | A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0 Affected: before 2020 |
| CVE-2020-25167 | 6.5 | Apr 18 | OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute Affected: before 3.5.0 |
| CVE-2019-18275 | 6.5 | Jan 15 | OSIsoft PI Vision, All versions of PI Vision prior to 2019 Affected: before 2019 |
| CVE-2018-7508 | 6.1 | Mar 14 | A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior Affected: through 2017 |
| CVE-2018-7504 | 6.1 | Mar 14 | A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior Affected: through 2017 |
| CVE-2021-43551 | 5.4 | Nov 17 | A remote attacker with write access to PI Vision could inject code into a display Affected: before 2021 |
| CVE-2020-10643 | 5.4 | Jul 27 | An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party… Affected: 2019 |
| CVE-2018-7496 | 5.3 | Mar 14 | An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior Affected: through 2017 |
| CVE-2020-10614 | 4.8 | Jul 25 | In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display Affected: through 2019 |
| CVE-2019-18273 | 4.8 | Jan 15 | OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1 Affected: 2017; 2017 |
| CVE-2018-19006 | 4.8 | Apr 8 | OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and… Affected: 2017; 2017 |
| CVE-2019-18244 | 4.7 | Jan 15 | In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or… Affected: 2017; 2017; 2019 |
| CVE-2021-43553 | 4.3 | Nov 17 | PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property Affected: before 2021 |
Showing 15