Vulnerability Details CVE-2020-12021
In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v3 Score 9.0
CVSS v2 Score 6.0
References
Products affected by CVE-2020-12021
-
cpe:2.3:a:osisoft:pi_web_api:2014
-
cpe:2.3:a:osisoft:pi_web_api:2015
-
cpe:2.3:a:osisoft:pi_web_api:2016
-
cpe:2.3:a:osisoft:pi_web_api:2017
-
cpe:2.3:a:osisoft:pi_web_api:2018
-
cpe:2.3:a:osisoft:pi_web_api:2019