Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OSIsoft PI Vision
Vulnerability Description
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
OSIsoft PI Vision 跨站脚本漏洞
Vulnerability Description
Osisoft OSIsoft PI Vision是美国OSIsoft(Osisoft)公司的一套支持从移动设备访问PI System数据的可视化工具,它支持自配置趋势、图像、数据值等以呈现数据信息。 OSIsoft PI Vision 存在跨站脚本漏洞,具有写访问权限的远程攻击者可以将代码注入显示器。
CVSS Information
N/A
Vulnerability Type
N/A