OSIsoft PI Web API

Summary

Vulnerabilities 2

• Unscored —
  CVE-2019-13515

  OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.

  Aug 15, 2019
• Unscored —
  CVE-2019-13516

  In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forg…

  Aug 15, 2019

Revision history

1. 2019-08-13 #1

   ICSA-19-225-02 OSIsoft PI Web API

References

• ICS Advisory ICSA-19-225-02 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-225-02
• Recommended Practices
  https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B