Pi Vision
Vendor:
First CVE: Mar 14, 2018 · Active for 8 years
15
Total CVEs
More Total CVEs than 92% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 21% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pi Vision over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 14, 2018
8 years ago
Most Recent CVE
Apr 18, 2022
1,560 days ago
CVE Severity & Scoring
Pi Vision15 CVEs
80%
13%
All CVEs352,719 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (6.7%)
Network14 (93.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (93.3%)
High1 (6.7%)
Unknown0 (0.0%)
User Interaction
None6 (40.0%)
Unknown0 (0.0%)
Required9 (60.0%)
Privileges Required
Low7 (46.7%)
High3 (20.0%)
None5 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-7500CRITICAL A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI | Mar 14, 2018 | 9.8 | 31 | NO | NO |
CVE-2019-18271HIGH OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administratio | Jan 15, 2020 | 8.8 | 24 | NO | NO |
CVE-2020-25167MEDIUM OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. | Apr 18, 2022 | 6.5 | 22 | NO | NO |
CVE-2020-10643MEDIUM An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party compon | Jul 27, 2020 | 5.4 | 21 | NO | NO |
CVE-2019-18275MEDIUM OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing an | Jan 15, 2020 | 6.5 | 21 | NO | NO |
CVE-2018-7508MEDIUM A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized. | Mar 14, 2018 | 6.1 | 21 | NO | NO |
CVE-2021-43551MEDIUM A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or i | Nov 17, 2021 | 5.4 | 20 | NO | NO |
CVE-2020-25163HIGH A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclos | Apr 18, 2022 | 7.3 | 19 | NO | NO |
CVE-2020-10614MEDIUM In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized inform | Jul 25, 2020 | 4.8 | 19 | NO | NO |
CVE-2018-7504MEDIUM A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, allowing attempts at ref | Mar 14, 2018 | 6.1 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Pi Vision
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2019 | 2 | 5.0 | 0.6% | 0 | 0 |
| 2017 | 4 | 5.5 | 0.7% | 0 | 0 |