OSIsoft PI Vision
X-XSS-Protection response header is not set to block, allowing attempts at reflected cross-site scripting. CVE-2018-7504 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Server response header and referrer-policy response header each provide unintended information disclosure. CVE-2018-7496 has been assigned to this vulnerability. A CVSS v3 base score of 4.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).