CVE-2017-9655
Medium
Description
A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site.
SeverityMedium
CVSS5.4
Exploit probability—
ProductOsisoft Pi Integrator For Business Analystics
PublishedAug 14, 2017
First seenAug 14, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| osisoft pi_integrator_for_business_analystics | v ≤ 2016 | — |
| osisoft pi_integrator_for_microsoft_azure | v ≤ 2016 | — |
| osisoft pi_integrator_for_sap_hana | v ≤ 2016 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.