Skip to content
OpenAdvisories

Vendor

OSIsoft

10 known vulnerabilities.

OSIsoft at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

PI Vision 6 PI Coresight 1 PI System software 1 PI Data Archive 1 PI Web API 1 PI Interface for DNP3 0 Applications using PI Asset Framework (AF) Client 2016 0 Applications using PI Software Development Kit (SDK) 2016 0 PI Data Archive 2105 0 PI Interface for IEEE C37.118 0 PI Vision 2020 0 PI Interface for OPC XML-DA 0 PI Connector for BACnet 0 PI API for Windows Integrated Security 0 Applications using PI Software Development Kit (SDK) 0 PI Connector for UFL 0 PI Connector for Siemens Simatic PCS 7 0 PI Connector for CygNet 0 PI Connector for DC Systems RTscada 0 PI to OCS 0 PI Connector for Ping 0 PI Data Collection Manager 0 PI Integrator for Business Analytics 0 PI Manual Logger 0 PI Connector for Ethernet/IP 0 PI Connector for Wonderware Historian 0 Applications using PI Asset Framework (AF) Client 0 RtReports 0 PI Connector for OPC-UA 0 PI Connector Relay 0 PI Connector for IEC 60870-5-104 versions 0 PI Buffer Subsystem 0 PI Interface Configuration Utility (ICU) 0 PI Connector for HART-IP 0 PI API 0 PI Web API 2019 0 PI Integrator for Business Analytics 2016 - Data Warehouse 0 PI Integrator for Microsoft Azure 0 PI Integrator for Business Analytics and SAP HANA SQL Utility 0 PI Integrator for Business Analytics 2016 - Business Intelligence 0

Latest advisories

  • High
    ICSA-14-098-01 2 CVEs rev. 2

    OSIsoft PI Interface for DNP3 Improper Input Validation

    OSIsoft
    first Jan 9, 2014
  • Medium
    ICSA-16-166-02 1 CVE rev. 2

    OSIsoft PI AF Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • Medium
    ICSA-16-166-01 1 CVE rev. 2

    OSIsoft PI SQL Data Access Server Input Validation Vulnerability

    OSIsoft
    first Mar 18, 2016
  • High
    ICSA-13-225-02 2 CVEs rev. 2

    OSIsoft Multiple Vulnerabilities

    OSIsoft
    first May 16, 2013
  • High
    ICSA-16-313-03 1 CVE rev. 2

    OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability

    OSIsoft
    first Aug 12, 2016
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 4.9
    CVE-2020-25167

    OSIsoft PI Vision Incorrect Authorization

    OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.

    OSIsoft PI Vision
  • High 7.7
    CVE-2020-25163

    OSIsoft PI Vision Cross-site Scripting

    A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts …

    OSIsoft PI Vision
  • Medium 6.9
    CVE-2021-43549

    OSIsoft PI Web API

    A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided w…

    OSIsoft PI Web API
  • Low 3.1
    CVE-2021-43553

    OSIsoft PI Vision

    PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.

    OSIsoft PI Vision
  • Medium 6.5
    CVE-2021-43551

    OSIsoft PI Vision

    A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impac…

    OSIsoft PI Vision
  • Medium 6.5
    CVE-2020-10643

    OSIsoft PI System

    An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party component.

    OSIsoft PI Vision
  • Medium 5.9
    CVE-2020-10600

    OSIsoft PI System

    An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

    OSIsoft PI Data Archive
  • Unscored —
    CVE-2018-19006

    OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vuln…

    OSIsoft PI Vision
  • Unscored —
    CVE-2017-9641

    PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsof…

    OSIsoft PI Coresight
  • Unscored —
    CVE-2016-8365

    OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Vers…

    OSIsoft PI System software