CVE-2020-25163
OSIsoft PI Vision Cross-site Scripting
- State
- Published
- Severity
- 7.7 High
- Published
- Apr 18, 2022
- Updated
- Apr 16, 2025
- Reserved
- Sep 4, 2020
Description
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected display. This vulnerability affects PI System data and other data accessible with victim’s user permissions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N | icscert |
Weaknesses
- CWE-79 Cross-site Scripting
Affected Products
| Product | Versions |
|---|---|
PI VisionOSIsoft |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.