Skip to content
Sign in
Not rated

CVE-2022-22804 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…

Description

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits a page containing the injected payload. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Power Monitoring Expert (Versions 2020 and prior) Versions not published

Other CVEs of EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

The 3 CVEs of EcoStruxure Power Monitoring Expert (Versions 2020 and prior) →
CVE-2022-22726 A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by… Not rated CVE-2022-22727 A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data,… Not rated
Track this CVE