CVE-2019-13515

Description

References

• us-cert.gov/ics/advisories/icsa-19-225-02 · Mitigation

More vulnerabilities in pi web api

• CVE-2021-43549MEDIUM 4.8A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect…
• CVE-2020-12021CRITICAL 9.0In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting att…
• CVE-2019-13516HIGH 8.8In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection settin…
• CVE-2018-7508MEDIUM 6.1A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is i…
• CVE-2018-7500CRITICAL 9.8A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be esca…