Non notée

CVE-2022-22804 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…

Description

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits a page containing the injected payload. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Produits et versions touchés

Produit	Versions touchées	Corrigé en
EcoStruxure Power Monitoring Expert (Versions 2020 and prior)	Versions non publiées

Les 3 CVE de EcoStruxure Power Monitoring Expert (Versions 2020 and prior) →

CVE-2022-22726 A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by… Non notée CVE-2022-22727 A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data,… Non notée

Vous utilisez EcoStruxure Power Monitoring Expert (Versions 2020 and prior) ?

Suivre cette CVE Surveiller EcoStruxure Power Monitoring Expert (Versions 2020 and prior) Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2022-22804

Chronologie

Publiée 4 février 2022
Dernière modification 3 août 2024

Références

download.schneider-electric.com download.schneider-electric.com

Suivre cette CVE

CVE-2022-22804 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…

Description

Produits et versions touchés

Autres CVE de EcoStruxure Power Monitoring Expert (Versions 2020 and prior)