CVE-2020-10614

CVE-2020-10614 is a cross-site scripting (XSS) vulnerability affecting multiple OSIsoft PI System products and versions, specifically PI Vision. An authenticated remote attacker with write access to PI Vision databases can inject malicious code into a display. If a victim views the compromised display, it could lead to unauthorized information disclosure, deletion, or modification. This vulnerability has a CVSS score of 4.8 (Medium) due to its network-based attack vector, low attack complexity, and the requirement for high privileges, with user interaction needed for exploitation. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.