Approved changes feed: RSS · Atom
cpe:2.3:a:osisoft:pi_vision:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Osisoft (773be19d-2e5d-5fef-8fcd-1eaca9773a63) |
|---|---|
| Product | Pi Vision (80e98a6c-572f-5116-ad70-f4bd05edb36b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/alexjj/pi-vision-custom-symbols |
purl2cpe | 2026-06-01 10:13:04.898960 |
pkg:github/osisoft/sample-pi_vision_extensibility-rotating_arrow-js |
purl2cpe | 2026-06-01 10:13:04.898963 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43553 |
vulnerable | 2026-06-08 05:36:43.542242 |
OSIsoft PI Vision
LOW (3.1)
PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.
Published: 2021-11-17T18:20:51.041Z
Updated: 2024-09-16T19:46:25.035Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43551 |
vulnerable | 2026-06-08 05:36:43.540289 |
OSIsoft PI Vision
MEDIUM (6.5)
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.
Published: 2021-11-17T18:19:44.773Z
Updated: 2024-09-16T23:16:08.135Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25167 |
vulnerable | 2026-06-08 05:22:36.079916 |
OSIsoft PI Vision Incorrect Authorization
MEDIUM (4.9)
OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute.
Published: 2022-04-18T16:20:46.000Z
Updated: 2025-04-16T16:29:22.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25163 |
vulnerable | 2026-06-08 05:22:36.073222 |
OSIsoft PI Vision Cross-site Scripting
HIGH (7.7)
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected display. This vulnerability affects PI System data and other data accessible with victim’s user permissions.
Published: 2022-04-18T16:20:45.000Z
Updated: 2025-04-16T17:55:26.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10643 |
vulnerable | 2026-06-08 05:16:35.435296 |
OSIsoft PI System
MEDIUM (6.5)
An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party component.
Published: 2020-07-27T21:20:54.980Z
Updated: 2024-09-16T23:51:08.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10614 |
vulnerable | 2026-06-08 05:16:35.389150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18275 |
vulnerable | 2026-06-08 05:13:11.330039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18271 |
vulnerable | 2026-06-08 05:13:11.329079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7508 |
vulnerable | 2026-06-08 05:12:03.782765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7504 |
vulnerable | 2026-06-08 05:12:03.778034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7496 |
vulnerable | 2026-06-08 05:12:03.764409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19006 |
vulnerable | 2026-06-08 05:11:15.161568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.