PT-2017-19099 · Osisoft+2 · Osisoft Pi Integrator For Business Analytics+4

Published 2017-08-14 · Updated 2017-08-23 · CVE-2017-9655

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2 OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1 OSIsoft PI Integrator for SAP HANA versions prior to 2017

Description A Cross-Site Scripting issue allows an attacker to upload a malicious script, potentially redirecting users to a malicious web site.

Recommendations For OSIsoft PI Integrator for Business Analytics versions prior to 2016 R2, update to version 2016 R2 or later. For OSIsoft PI Integrator for Microsoft Azure versions prior to 2016 R2 SP1, update to version 2016 R2 SP1 or later. For OSIsoft PI Integrator for SAP HANA versions prior to 2017, update to version 2017 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-9655

Affected Products

Azure

Osisoft Pi Integrator For Business Analytics

Osisoft Pi Integrator For Microsoft Azure

Osisoft Pi Integrator For Sap Hana

Sap Hana

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-9655 · Security Note
• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9655 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01 · Note
• http://securityfocus.com/bid/100212 · Note