description: In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code.
problem types: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
affected:
{
product: OSIsoft PI Web API 2019
vendor: n/a
versions:
status: affected, version: OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions
}