Skip to content
Sign in
8.2 High

CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability…

Description

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Power Monitoring Expert (PME) Versions not published
EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module Versions not published
EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module Versions not published

Other CVEs of EcoStruxure Power Monitoring Expert (PME)

The 3 CVEs of EcoStruxure Power Monitoring Expert (PME) →
CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the… 7.3 High CVE-2023-5987 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could… 6.1 Medium
Track this CVE