Known vulnerabilities in PI Vision

Known vulnerabilities in PI Vision

Vendor: OSIsoft

Software: PI Vision

Software CPE: cpe:2.3:a:osisoft:pi_vision:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU58244 - Improper Authorization CVE-2021-3095	CWE-285	Low	No	No	2021	18.11.2021	SB2021111819
#VU58243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3090	CWE-79	Low	No	No	2021	18.11.2021	SB2021111819
#VU48362 - Improper Authorization CVE-2020-25167	CWE-285	Low	No	No	2020	11.11.2020	SB2020111108
#VU48361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-25163	CWE-79	Low	No	No	2020	11.11.2020	SB2020111108
#VU34125 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-10643	CWE-79	Low	No	No	-	28.07.2020	SB2020072851
#VU24316 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-18273	CWE-79	Low	No	No	-	15.01.2020	SB2020011507
#VU24315 - Information Exposure Through Log Files CVE-2019-18244	CWE-532	Low	No	No	-	15.01.2020	SB2020011507
#VU24314 - Cross-Site Request Forgery (CSRF) CVE-2019-18271	CWE-352	Low	No	No	2019	15.01.2020	SB2020011506
#VU24313 - Improper Access Control CVE-2019-18275	CWE-284	Medium	No	No	2019	15.01.2020	SB2020011506
#VU17722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-19006	CWE-79	Low	No	No	2017 R2 SP1	15.02.2019	SB2018121127
#VU11116 - Exposure of sensitive information to an unauthorized actor CVE-2018-7496	CWE-200	Low	No	No	-	15.03.2018	SB2018031508
#VU11115 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-7504	CWE-79	Low	No	No	-	13.03.2018	SB2018031508