CVE-2018-19006

State: Published
Severity: Not scored
Published: Apr 8, 2019
Updated: Aug 5, 2024
Reserved: Nov 6, 2018

Description

OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79

Affected Products

Product	Versions
PI VisionOSIsoft	PI Vision 2017Affected and PI Vision 2017 R2Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-043-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.