GCVE - cpe:2.3:a:n/a:osisoft_pi_web_api:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:osisoft_pi_web_api:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Osisoft Pi Web Api (`53952834-2116-57b5-b9cc-bbd4574b95bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-13516`	vulnerable	2026-06-08 05:12:51.914824	Details available In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect. Published: 2019-08-15T18:49:15.000Z Updated: 2024-08-04T23:57:39.193Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-19-225-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13515`	vulnerable	2026-06-08 05:12:51.913351	Details available OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information. Published: 2019-08-15T18:39:36.000Z Updated: 2024-08-04T23:57:39.455Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-19-225-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-7508`	vulnerable	2026-06-08 05:12:03.782586	Details available A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized. Published: 2018-03-14T18:00:00.000Z Updated: 2024-08-05T06:31:03.702Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103396 https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-7500`	vulnerable	2026-06-08 05:12:03.770646	Details available A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account. Published: 2018-03-14T18:00:00.000Z Updated: 2024-08-05T06:31:04.282Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103396 https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.