Back to Database
Status published
Medium
CVE-2018-19006
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision...
Vulnerability Description
OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19006
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
OSIsoft
View all reports →Affected Software
PI Vision
Vulnerable Versions:
PI Vision 2017, and PI Vision 2017 R2
Timeline
Official Publish:
April 8th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N