Osisoft vulnerabilities

Products

• Pi Vision 15
• Pi Data Archive 11
• Pi Web Api 8
• Pi Vision 6
• Pi Buffer Subsystem 4
• Pi Interface 4
• Pi Api 3
• Pi Connector 3
• Pi Connector Relay 3
• Pi Data Collection Manager 3
• Pi Integrator 3
• Pi Interface Configuration Utility 3
• Pi To Ocs 3
• Pi Coresight 2
• Pi Integrator For Business Analystics 2
• Pi Integrator For Microsoft Azure 2
• Pi Integrator For Sap Hana 2
• Pi Server 2

Newest

• osisoft pi vision OSIsoft PI Vision Incorrect Authorization CVE-2020-25167 4.9 MediumApril 18, 2022
• osisoft pi vision OSIsoft PI Vision Cross-site Scripting CVE-2020-25163 7.7 HighApril 18, 2022
• aveva pi web api OSIsoft PI Web API CVE-2021-43549 6.9 MediumNovember 18, 2021
• osisoft pi vision OSIsoft PI Vision CVE-2021-43553 3.1 LowNovember 17, 2021
• osisoft pi vision OSIsoft PI Vision CVE-2021-43551 6.5 MediumNovember 17, 2021
• osisoft pi vision OSIsoft PI System CVE-2020-10643 6.5 MediumJuly 27, 2020
• osisoft pi vision In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write... CVE-2020-10614 4.8 MediumJuly 24, 2020
• osisoft pi data archive In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could... CVE-2020-10604 7.5 HighJuly 24, 2020
• aveva pi data archive OSIsoft PI System CVE-2020-10600 5.9 MediumJuly 24, 2020
• osisoft pi api, pi buffer subsystem, pi connector +6 more +8 more In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect... CVE-2020-10606 7.8 HighJuly 24, 2020
• osisoft pi api, pi buffer subsystem, pi connector +6 more +8 more In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and... CVE-2020-10608 7.8 HighJuly 24, 2020
• osisoft pi api, pi buffer subsystem, pi connector +6 more +8 more In OSIsoft PI System multiple products and versions, a local attacker can modify a search path... CVE-2020-10610 7.8 HighJuly 24, 2020
• osisoft pi web api In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product... CVE-2020-12021 9.0 CriticalJune 23, 2020
• osisoft pi vision OSIsoft PI Vision, PI Vision 2017 R2, PI Vision 2017 R2 SP1, PI Vision 2019. The affected product... CVE-2019-18244 4.7 MediumJanuary 15, 2020
• osisoft pi vision OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is... CVE-2019-18273 4.8 MediumJanuary 15, 2020
• osisoft pi vision OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to... CVE-2019-18271 8.8 HighJanuary 15, 2020
• osisoft pi vision OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to... CVE-2019-18275 6.5 MediumJanuary 15, 2020
• osisoft pi web api In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a... CVE-2019-13516 8.8 HighAugust 15, 2019
• osisoft pi web api OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information. CVE-2019-13515 6.5 MediumAugust 15, 2019
• osisoft pi vision OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a... CVE-2018-19006 4.8 MediumApril 8, 2019
• osisoft pi coresight PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to... CVE-2017-9641 8.8 HighMay 25, 2018
• osisoft pi system software, pi af client, pi buffer subsystem +2 more +4 more OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to... CVE-2016-8365 5.5 MediumApril 3, 2018
• osisoft pi data archive An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017... CVE-2018-7533 7.8 HighMarch 14, 2018
• osisoft pi data archive An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and... CVE-2018-7531 5.9 MediumMarch 14, 2018
• osisoft pi data archive A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017... CVE-2018-7529 7.5 HighMarch 14, 2018
• osisoft pi web api, pi vision +1 more A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.... CVE-2018-7508 6.1 MediumMarch 14, 2018
• osisoft pi vision A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior.... CVE-2018-7504 6.1 MediumMarch 14, 2018
• osisoft pi web api, pi vision +1 more A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API... CVE-2018-7500 9.8 CriticalMarch 14, 2018
• osisoft pi vision An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The... CVE-2018-7496 5.3 MediumMarch 14, 2018
• osisoft pi data archive An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive... CVE-2017-7934 5.9 MediumAugust 25, 2017
• osisoft pi data archive An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive... CVE-2017-7930 7.4 HighAugust 25, 2017
• osisoft pi web api A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1... CVE-2017-7926 8.8 HighAugust 25, 2017
• osisoft pi integrator for microsoft azure, pi integrator for sap hana, pi integrator for business analystics +2 more A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics... CVE-2017-9655 5.4 MediumAugust 14, 2017
• osisoft pi integrator for microsoft azure, pi integrator for sap hana, pi integrator for business analystics +2 more An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics... CVE-2017-9653 9.8 CriticalAugust 14, 2017
• osisoft pi coresight, pi web api +1 more An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016... CVE-2017-5153 7.8 HighFebruary 13, 2017
• osisoft pi web api 2015 r2 An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). There is a weakness in... CVE-2016-8353 6.4 MediumFebruary 13, 2017
• osisoft pi sql data access server 2016 OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to... CVE-2016-4530 6.5 MediumJune 19, 2016
• osisoft pi af server 2016 OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of... CVE-2016-4518 6.5 MediumJune 19, 2016
• osisoft pi sql for af, pi server +1 more OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted... CVE-2015-1013 6.5 MediumMay 26, 2015
• osisoft pi interface The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically... CVE-2013-2828 4.7 MediumApril 12, 2014
• osisoft pi interface The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote... CVE-2013-2809 7.1 HighApril 12, 2014
• osisoft pi interface The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a... CVE-2013-2801 5.0 MediumAugust 22, 2013
• osisoft pi interface The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a... CVE-2013-2800 5.0 MediumAugust 22, 2013
• osisoft pi opc da interface Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote... CVE-2012-3008 8.5 HighJuly 20, 2012
• osisoft pi server PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default... CVE-2009-0209 6.4 MediumOctober 1, 2009