CVE-2017-9641CWE-352

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system

published May 25, 2018

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2018-05-25T15:00Z
EPSS history
Timeline
  • 25 MAY 15:00Z
    PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system
    cvelistv5