Skip to content
OpenAdvisories

Vendor

OSIsoft

10 known vulnerabilities.

Products

PI Vision 6 PI Coresight 1 PI System software 1 PI Data Archive 1 PI Web API 1 PI Interface for DNP3 0 Applications using PI Asset Framework (AF) Client 2016 0 Applications using PI Software Development Kit (SDK) 2016 0 PI Data Archive 2105 0 PI Interface for IEEE C37.118 0 PI Vision 2020 0 PI Interface for OPC XML-DA 0 PI Connector for BACnet 0 PI API for Windows Integrated Security 0 Applications using PI Software Development Kit (SDK) 0 PI Connector for UFL 0 PI Connector for Siemens Simatic PCS 7 0 PI Connector for CygNet 0 PI Connector for DC Systems RTscada 0 PI to OCS 0 PI Connector for Ping 0 PI Data Collection Manager 0 PI Integrator for Business Analytics 0 PI Manual Logger 0 PI Connector for Ethernet/IP 0 PI Connector for Wonderware Historian 0 Applications using PI Asset Framework (AF) Client 0 RtReports 0 PI Connector for OPC-UA 0 PI Connector Relay 0 PI Connector for IEC 60870-5-104 versions 0 PI Buffer Subsystem 0 PI Interface Configuration Utility (ICU) 0 PI Connector for HART-IP 0 PI API 0 PI Web API 2019 0 PI Integrator for Business Analytics 2016 - Data Warehouse 0 PI Integrator for Microsoft Azure 0 PI Integrator for Business Analytics and SAP HANA SQL Utility 0 PI Integrator for Business Analytics 2016 - Business Intelligence 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.9
    CVE-2020-25167

    OSIsoft PI Vision Incorrect Authorization

    OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.

    OSIsoft PI Vision
  • Medium 6.9
    CVE-2021-43549

    OSIsoft PI Web API

    A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided w…

    OSIsoft PI Web API
  • Medium 6.5
    CVE-2021-43551

    OSIsoft PI Vision

    A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impac…

    OSIsoft PI Vision
  • Medium 6.5
    CVE-2020-10643

    OSIsoft PI System

    An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party component.

    OSIsoft PI Vision
  • Medium 5.9
    CVE-2020-10600

    OSIsoft PI System

    An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

    OSIsoft PI Data Archive