Skip to content
Sign in
6.1 Medium

CVE-2023-5987 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could…

Description

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Power Monitoring Expert (PME) Versions not published
EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module Versions not published
EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module Versions not published

Other CVEs of EcoStruxure Power Monitoring Expert (PME)

The 3 CVEs of EcoStruxure Power Monitoring Expert (PME) →
CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the… 7.3 High CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability… 8.2 High
Track this CVE