Aller au contenu
Se connecter
6.1 Moyenne

CVE-2023-5987 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could…

Description

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.

Produits et versions touchés

Produit Versions touchées Corrigé en
EcoStruxure Power Monitoring Expert (PME) Versions non publiées
EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module Versions non publiées
EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module Versions non publiées

Autres CVE de EcoStruxure Power Monitoring Expert (PME)

Les 3 CVE de EcoStruxure Power Monitoring Expert (PME) →
CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the… 7.3 Élevée CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability… 8.2 Élevée
Suivre cette CVE