CVE-2017-9641

State: Published
Severity: Not scored
Published: May 25, 2018
Updated: Sep 16, 2024
Reserved: Jun 14, 2017

Description

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.

Scores

The record has no CVSS score.

Weaknesses

CWE-352 Cross-site request forgery CWE-352

Affected Products

Product	Versions
PI CoresightOSIsoft	2016 R2 and earlier versions.Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320
99540vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.