CVE-2021-43549: Osisoft Pi Web API

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided with false information.

Affected products

• Osisoft Pi Web API: up to and including 2019

Published 2021-11-18. Last modified 2026-06-17.