CVE-2018-7500CWE-264

CVE-2018-7500: vulnerability in OSIsoft PI Web API

Published · Updated

Follow this CVE+ Monitor PI Web API

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.
Affected products
n/a · OSIsoft PI Web API