CVE-2017-9655: XSS
First published: Mon Aug 14 2017(Updated: )
A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Osisoft Pi Integrator For Business Analystics | <=2016 | |
| Osisoft Pi Integrator For Microsoft Azure | <=2016 | |
| Osisoft Pi Integrator For Sap Hana | <=2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-9655?
CVE-2017-9655 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2017-9655?
To fix CVE-2017-9655, upgrade the software to a version later than 2016 R2 for PI Integrator for Business Analytics and PI Integrator for Microsoft Azure, or later than 2017 for PI Integrator for SAP HANA.
What types of attacks can exploit CVE-2017-9655?
CVE-2017-9655 can be exploited through cross-site scripting, allowing attackers to inject malicious scripts.
Which versions of OSIsoft products are affected by CVE-2017-9655?
The affected versions of OSIsoft products include PI Integrator for Business Analytics, PI Integrator for Microsoft Azure, and PI Integrator for SAP HANA before specified updates.
Can CVE-2017-9655 affect my organization's security?
Yes, CVE-2017-9655 poses a risk to organizational security as it allows attackers to redirect users, potentially leading to data theft or further exploitation.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/tags
- agent/source
- vendor/osisoft
- canonical/osisoft pi integrator for business analystics
- version/osisoft pi integrator for business analystics/2016
- canonical/osisoft pi integrator for microsoft azure
- version/osisoft pi integrator for microsoft azure/2016
- canonical/osisoft pi integrator for sap hana
- version/osisoft pi integrator for sap hana/2016