Skip to content
Noroxi

OSIsoft records

45 published records for vendor osisoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

45 records
  • CVE-2017-9653
    40Plan

    An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft A

    CriticalCVSS 9.8No exploitEPSS 2%

    osisoft · pi integrator for business analysticsAug 14, 2017

  • CVE-2018-7500
    40Plan

    A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.

    CriticalCVSS 9.8No exploitEPSS 1%

    osisoft · pi web apiMar 14, 2018

  • CVE-2020-12021
    36Monitor

    In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting att

    CriticalCVSS 9.0No exploitEPSS 1%

    osisoft · pi web apiJun 23, 2020

  • CVE-2012-3008
    35Monitor

    Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by se

    HighCVSS 8.5No exploitEPSS 4%

    osisoft · pi opc da interfaceJul 20, 2012

  • CVE-2017-9641
    35Monitor

    PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system.

    HighCVSS 8.8No exploitEPSS 0%

    osisoft · pi coresightMay 25, 2018

  • CVE-2017-7926
    35Monitor

    A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0).

    HighCVSS 8.8No exploitEPSS 0%

    osisoft · pi web apiAug 25, 2017

  • CVE-2019-13516
    35Monitor

    In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection settin

    HighCVSS 8.8No exploitEPSS 0%

    osisoft · pi web apiAug 15, 2019

  • CVE-2019-18271
    35Monitor

    OSIsoft PI Vision, All versions of PI Vision prior to 2019.

    HighCVSS 8.8No exploitEPSS 0%

    osisoft · pi visionJan 15, 2020

  • CVE-2020-10604
    31Monitor

    In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through speci

    HighCVSS 7.5No exploitEPSS 2%

    osisoft · pi data archiveJul 24, 2020

  • CVE-2018-7529
    31Monitor

    A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.

    HighCVSS 7.5No exploitEPSS 2%

    osisoft · pi data archiveMar 14, 2018

  • CVE-2020-10610
    31Monitor

    In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI

    HighCVSS 7.8No exploitEPSS 0%

    osisoft · pi apiJul 24, 2020

  • CVE-2017-5153
    31Monitor

    An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services

    HighCVSS 7.8No exploitEPSS 0%

    osisoft · pi coresightFeb 13, 2017

  • CVE-2018-7533
    31Monitor

    An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.

    HighCVSS 7.8No exploitEPSS 0%

    osisoft · pi data archiveMar 14, 2018

  • CVE-2020-10606
    31Monitor

    In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software.

    HighCVSS 7.8No exploitEPSS 0%

    osisoft · pi apiJul 24, 2020

  • CVE-2020-10608
    31Monitor

    In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI Sy

    HighCVSS 7.8No exploitEPSS 0%

    osisoft · pi apiJul 24, 2020

  • CVE-2017-7930
    30Monitor

    An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017.

    HighCVSS 7.4No exploitEPSS 2%

    osisoft · pi data archiveAug 25, 2017

  • CVE-2020-25163
    29Monitor

    OSIsoft PI Vision Cross-site Scripting

    HighCVSS 7.3No exploitEPSS 0%

    osisoft · pi visionApr 18, 2022

  • CVE-2013-2809
    28Monitor

    The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service (interface s

    HighCVSS 7.1No exploitEPSS 1%

    osisoft · pi interfaceApr 12, 2014

  • CVE-2020-10600
    28Monitor

    An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure.

    HighCVSS 7.1No exploitEPSS 1%

    osisoft · pi data archiveJul 24, 2020

  • CVE-2016-4530
    26Monitor

    OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and d

    MediumCVSS 6.5No exploitEPSS 1%

    osisoft · pi sql data access server 2016Jun 19, 2016

  • CVE-2019-13515
    26Monitor

    OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.

    MediumCVSS 6.5No exploitEPSS 1%

    osisoft · pi web apiAug 15, 2019

  • CVE-2015-1013
    26Monitor

    OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, whic

    MediumCVSS 6.5No exploitEPSS 1%

    osisoft · pi serverMay 25, 2015

  • CVE-2016-4518
    26Monitor

    OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.

    MediumCVSS 6.5No exploitEPSS 1%

    osisoft · pi af server 2016Jun 19, 2016

  • CVE-2019-18275
    26Monitor

    OSIsoft PI Vision, All versions of PI Vision prior to 2019.

    MediumCVSS 6.5No exploitEPSS 1%

    osisoft · pi visionJan 15, 2020

  • CVE-2020-25167
    26Monitor

    OSIsoft PI Vision Incorrect Authorization

    MediumCVSS 6.5No exploitEPSS 0%

    osisoft · pi visionApr 18, 2022