CVE-2018-19006 OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing Jav...
MediumCVSS 4.8
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| osisoft pi vision | = 2017 | No fix listed |
| osisoft pi vision | = 2017-r2 | No fix listed |
| osisoft pi vision | = PI Vision 2017 | No fix listed |
| osisoft pi vision | = and PI Vision 2017 R2 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource