{"id":"CVE-2017-9655","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-9655","generatedAt":"2026-10-28T20:08:46.460Z","title":"A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017.","description":"A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker may be able to upload a malicious script that attempts to redirect users to a malicious web site.","published":"2017-08-14T16:29:00.000Z","lastModified":"2026-06-17T01:28:40.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.0","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["osisoft/pi integrator for business analystics","osisoft/pi integrator for microsoft azure","osisoft/pi integrator for sap hana"],"epss":{"score":0.00909,"percentile":0.59778,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.91%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/100212","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324","tags":["Vendor Advisory"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/100212","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01","tags":["Mitigation","Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-9655","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}