CVE-2019-13516 - In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect

Back Back to CVE browser

HIGH

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect

Published Aug 15, 2019

8.8

HIGH

CVSS 3.1

EPSS 0.66%

Description

In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect.

Affected products

Vendor n/a Product OSIsoft PI Web API Default
unknown
Affected
- PI Web API 2018 and prior.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	OSIsoft PI Web API	unknown	Affected PI Web API 2018 and prior.

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-693

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4971
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-225-02
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4971		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-225-02		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 15, 2019

Updated Aug 4, 2024

Reserved Jul 11, 2019

Link CVE-2019-13516

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13516

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Aug 15, 2019

Updated Aug 4, 2024

Link EUVD-2019-4971

GitHub

No data