https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:16:13.560080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-05300 cnvd-2018-05300 2026-10-04T15:16:13.563677+00:00 cnvd-2018-05300 https://cve.radiocsirt.org/vuln/euvd-2026-63252 EUVD-2026-63252 2026-10-04T15:16:13.563709+00:00 EUVD-2026-63252 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7508 fkie_cve-2018-7508 2026-10-04T15:16:13.563724+00:00

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized.

 https://cve.radiocsirt.org/vuln/ghsa-rh53-fxfh-q9v6 GHSA-rh53-fxfh-q9v6 2026-10-04T15:16:13.563752+00:00

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized.

 https://cve.radiocsirt.org/vuln/gsd-2018-7508 gsd-2018-7508 2026-10-04T15:16:13.563767+00:00 gsd-2018-7508 https://cve.radiocsirt.org/vuln/icsa-18-072-04 ICSA-18-072-04 — OSIsoft PI Web API 2026-10-04T15:16:13.563787+00:00

Privileges may be escalated, giving attackers access to the PI System via the service account. CVE-2018-7500 has been assigned to this vulnerability. A CVSS v3 base score of 9.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N). Cross-site scripting may occur when input is incorrectly neutralized. CVE-2018-7508 has been assigned to this vulnerability. A CVSS v3 base score of 4.7 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).