OSIsoft PI Vision
view advisory published 2020-01-14
Successful exploitation of these vulnerabilities may allow disclosure of sensitive information and limit the availability of the system.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-18275US | medium6.5 | — | ||
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing an… | ||||
| CVE-2019-18273US | medium4.8 | — | ||
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced. | ||||
| CVE-2019-18271US | high8.8 | — | ||
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administratio… | ||||
| CVE-2019-18244US | medium4.7 | — | ||
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgr… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan