CVE-2018-7508: Osisoft Pi Vision

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized.

Affected products

• Osisoft Pi Vision: up to and including 2017
• Osisoft Pi Web API: up to and including 2017; version 2017 only

Published 2018-03-14. Last modified 2026-06-17.