Skip to content
OpenAdvisories
High ICSA-20-315-02 2 CVEs

OSIsoft PI Vision

Published Nov 10, 2020 · Updated Nov 10, 2020

Vendor: OSIsoft Product: PI Vision 2020

Summary

Successful exploitation of these vulnerabilities may allow a remote attacker with write access to the PI ProcessBook files to inject code that is imported into PI Vision, or disclose information to a user with insufficient privileges.

Vulnerabilities 2

  • High 7.7
    CVE-2020-25163

    OSIsoft PI Vision Cross-site Scripting

    A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts …

    OSIsoft PI Vision
  • Medium 4.9
    CVE-2020-25167

    OSIsoft PI Vision Incorrect Authorization

    OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.

    OSIsoft PI Vision

Revision history

  1. #1

    ICSA-20-315-02 OSIsoft PI Vision

References