Login Request a demo
PW
Product
PI Web Api
by Osisoft · last CVE Nov 18, 2021
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 3Medium 3Low 0
Severity
All severities8Critical2High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add PI Web Api to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7500
9.8
2%
Mar 14
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior
Affected: through 2017; 2017
CVE-2020-12021
9.0
2%
Jun 23
In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to…
Affected: through 2019; 2019
CVE-2019-13516
8.8
1%
Aug 15
In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect
Affected: through 2018
CVE-2017-7926
8.8
1%
Aug 25
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0)
Affected: 1.8
CVE-2017-5153
7.8
0%
Feb 13
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit
Affected: 2016-r2
CVE-2019-13515
6.5
1%
Aug 15
OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information
Affected: through 2018
CVE-2018-7508
6.1
1%
Mar 14
A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior
Affected: through 2017; 2017
CVE-2021-43549
4.8
1%
Nov 18
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website
Affected: through 2019
Showing 8