CVE-2020-10614CWE-79

In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display

published July 24, 2020

CVSS
—
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00891 · 59.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-07-24T23:43Z
EPSS history
Timeline
  • 24 JUL 23:43Z
    In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display
    cvelistv5