CVE-2018-7504 - AskarLabs CVE Database

CVE-2018-7504

Vendor N/A

Product OSIsoft PI Vision

Weakness CWE-693

Published March 14, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, allowing attempts at reflected cross-site scripting.

Key dates

02Disclosure timeline

March 14, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-7504 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/693.html

Related vulnerabilities

04Related CVE

CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability CVE-2022-39957 Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header CVE-2022-35978 Lua sandbox escape from mod in Minetest CVE-2020-3455 Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability