Known vulnerabilities in OSIsoft PI Web API

Known vulnerabilities in OSIsoft PI Web API

Vendor: OSIsoft

Software: OSIsoft PI Web API

Software CPE: cpe:2.3:a:osisoft:osisoft_pi_web_api:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU58099 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3093	CWE-79	Low	No	No	2021	10.11.2021	SB2021111009
#VU28994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-12021	CWE-79	Low	No	No	2019 SP1	12.06.2020	SB2020061203
#VU20455 - Protection Mechanism Failure CVE-2019-13516	CWE-693	Low	No	No	2018 SP1	29.08.2019	SB2019081344 SB2019121201 SB2020012916 and 2 more
#VU20454 - Information Exposure Through Log Files CVE-2019-13515	CWE-532	Low	No	No	2018 SP1	29.08.2019	SB2019081344 SB2019121201 SB2020012916 and 2 more
#VU11118 - Permissions, Privileges, and Access Controls CVE-2018-7500	CWE-264	Low	No	No	-	15.03.2018	SB2018031509
#VU11117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-7508	CWE-79	Low	No	No	-	13.03.2018	SB2018031509
#VU993 - Permissions, Privileges, and Access Controls CVE-2016-8353	CWE-264	Low	No	No	-	13.10.2016	SB2016101307