PatchTheCVEosisoft vulnerabilities
Recent CVEs affecting osisoft products. 5 tracked.
osisoft has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-04-18. Highest priority: CVE-2020-25163 (score 42/100).
- CVE-2021-43553 LOW 3.1 UPGRADE PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the ch
- CVE-2021-43551 MEDIUM 6.5 UPGRADE A remote attacker with write access to PI Vision could inject code into a display
- CVE-2021-43549 MEDIUM 6.9 UPGRADE A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI
- CVE-2020-25167 MEDIUM 4.9 UPGRADE OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileg
- CVE-2020-25163 HIGH 7.7 UPGRADE A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI
FAQ
How do I fix osisoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is osisoft being exploited right now?
None of the tracked osisoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which osisoft CVE should I patch first?
CVE-2020-25163 currently ranks highest (42/100): A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI.