CVE-2017-9655
Summary
| CVE | CVE-2017-9655 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-14 16:29:00 UTC |
| Updated | 2017-08-23 19:23:00 UTC |
| Description | A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Osisoft | Pi Integrator For Business Analystics | All | All | All | All |
| Application | Osisoft | Pi Integrator For Microsoft Azure | All | All | All | All |
| Application | Osisoft | Pi Integrator For Sap Hana | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OSIsoft PI Integrator ICSA-17-220-01 Privilege Escalation and Cross Site Scripting Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| OSIsoft PI Integrator | ICS-CERT | MISC | ics-cert.us-cert.gov | Mitigation, Third Party Advisory, US Government Resource |
| Security updates for PI Integrator For Business Analytics 2016, PI Integrator for Microsoft Azure 2016, and PI Integrator for SAP HANA 2016 | CONFIRM | techsupport.osisoft.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.