OSIsoft PI Vision
view advisory published 2019-02-12
Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data related to the PI Vision application in the victim 's browser.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-19006US | medium4.8 | — | ||
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attri… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationPI Vision
For more information on this vulnerability, please refer to OSIsoft's Security Bulletin AL00344 using the link below:
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00344 - FixedPI Vision
OSIsoft recommends users upgrade to PI Vision 2017 R2 SP1 to address this issue. This update can be obtained directly from OSIsoft.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan