CVE-2018-19006CWE-79

CVE-2018-19006: vulnerability in OSIsoft PI Vision

Published · Updated

Follow this CVE+ Monitor PI Vision

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes.
Affected products
OSIsoft · PI Vision
Related CVEs — OSIsoft PI Vision

In the same product, most dangerous first.

CVE-2020-10643MEDIUMOSIsoft PI SystemEPSS 1.0%CVE-2020-25163HIGHOSIsoft PI Vision Cross-site ScriptingEPSS 0.9%CVE-2020-25167MEDIUMOSIsoft PI Vision Incorrect AuthorizationEPSS 0.7%CVE-2021-43551MEDIUMOSIsoft PI VisionEPSS 0.6%CVE-2021-43553LOWOSIsoft PI VisionEPSS 0.6%