VULNERABILITY INTELLIGENCE
CVE-2019-18275
CVSS score6.5 MEDIUM
EPSS probability1.10%
CISA KEVNot currently listed
Published2020-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-284
- nvd@nist.gov: NVD-CWE-Other
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource