Skip to content
Sign in
6.1 Medium

CVE-2023-25553 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a…

Description

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products and versions

Product Affected versions Fixed in
StruxureWare Data Center Expert 7.9 earliest → 7.9.2 No fix stated

Other CVEs of StruxureWare Data Center Expert

The 15 CVEs of StruxureWare Data Center Expert →
CVE-2023-37199 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37198 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High CVE-2023-37196 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High
Track this CVE