CVE-2018-7508 - A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior

Back Back to CVE browser

MEDIUM

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior

Published Mar 14, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 0.83%

Description

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized.

Affected products

Vendor n/a Product OSIsoft PI Web API Default
unknown
Affected
- OSIsoft PI Web API

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	OSIsoft PI Web API	unknown	Affected OSIsoft PI Web API

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.securityfocus.com/bid/103396
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-19237
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/103396		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-19237		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Mar 14, 2018

Updated Aug 5, 2024

Reserved Feb 26, 2018

Link CVE-2018-7508

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-7508

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Mar 14, 2018

Updated Aug 5, 2024

Link EUVD-2018-19237

GitHub

No data