Summary
Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data related to the PI Vision application in the victim 's browser.
Vulnerabilities 1
-
Unscored —
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vuln…
Revision history
-
#1
ICSA-19-043-01 OSIsoft PI Vision
References
-
ICS Advisory ICSA-19-043-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-043-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B