CVE-2020-12021

概要

参考情報

• us-cert.gov/ics/advisories/icsa-20-163-01 · Third Party Advisory

pi web api のその他の脆弱性

• CVE-2021-43549中 4.8A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect…
• CVE-2019-13516高 8.8In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection settin…
• CVE-2019-13515中 6.5OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.
• CVE-2018-7508中 6.1A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is i…
• CVE-2018-7500緊急 9.8A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be esca…