Schneider-electric U.motion_builder
24 CVEs affecting Schneider-electric U.motion_builder. Latest disclosed: 2019-05-22. Critical: 5, High: 12.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7841 | Critical | 9.8 | 2019-05-22 | A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of char… |
CVE-2018-7785 | Critical | 9.8 | 2018-07-03 | In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass. |
CVE-2017-9957 | Critical | 9.8 | 2017-09-26 | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account wit… |
CVE-2017-7974 | Critical | 9.8 | 2017-09-26 | A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthentic… |
CVE-2017-7973 | Critical | 9.8 | 2017-09-26 | A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls… |
CVE-2018-7777 | High | 8.8 | 2018-07-03 | The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software version… |
CVE-2018-7774 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite data… |
CVE-2018-7773 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite dat… |
CVE-2018-7772 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to v1… |
CVE-2018-7769 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite dat… |
CVE-2018-7768 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite… |
CVE-2018-7767 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite da… |
CVE-2018-7766 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite… |
CVE-2018-7765 | High | 8.8 | 2018-07-03 | The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying… |
CVE-2018-7771 | High | 8.0 | 2018-07-03 | The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vu… |
CVE-2017-9958 | High | 7.8 | 2017-09-26 | An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the… |
CVE-2017-9956 | High | 7.3 | 2017-09-26 | An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-co… |
CVE-2018-7786 | Medium | 6.1 | 2018-07-03 | In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of mali… |
CVE-2017-9959 | Medium | 5.5 | 2017-09-26 | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenti… |
CVE-2018-7787 | Medium | 5.3 | 2018-07-03 | In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTT… |