CVE-2018-7500: Osisoft Pi Vision

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.

Affected products

• Osisoft Pi Vision: version 2017 only
• Osisoft Pi Web API: up to and including 2017; version 2017 only

Published 2018-03-14. Last modified 2026-06-17.