CVE:CVE-2017-9655
CNNVD:CNNVD-201706-582
OSIsoft PI Integrator是美国OSIsoft公司的一款为外部系统提供可视化数据的工具。
OSIsoft PI Integrator中存在跨站脚本漏洞。远程攻击者可利用该漏洞上传恶意的脚本。以下版本受到影响：OSIsoft PI Integrator for Business Analytics 2016 R2之前的版本，PI Integrator for Microsoft Azure 2016 R2 SP1之前的版本，PI Integrator for SAP HANA 2017之前的版本。
solution:Upgrade osisoft pi_integrator_for_business_analystics to a higher version than 2016,and avoid the version (,2016]; Upgrade osisoft pi_integrator_for_microsoft_azure to a higher version than 2016,and avoid the version (,2016]; Upgrade osisoft pi_integrator_for_sap_hana to a higher version than 2016,and avoid the version (,2016]