5.1
Moyenne
CVE-2025-3117 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Modicon Controllers M241/M251 | Versions non publiées | |
| Modicon Controllers M262 | Versions non publiées |
Autres CVE de Modicon Controllers M241/M251
Les 7 CVE de Modicon Controllers M241/M251 →
CVE-2025-13902
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
5.1
Moyenne
CVE-2025-3116
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
7.1
Élevée
CVE-2025-3905
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Moyenne
CVE-2025-3112
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated…
7.1
Élevée