Schneider-Electric Webreports
5 CVEs affecting Schneider-Electric Webreports. Latest disclosed: 2020-11-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7572 | High | 8.8 | 2020-11-19 | A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause… |
CVE-2020-7569 | High | 8.8 | 2020-11-19 | A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an aut… |
CVE-2020-7573 | Medium | 6.5 | 2020-11-19 | A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able t… |
CVE-2020-7571 | Medium | 5.4 | 2020-11-19 | A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Ope… |
CVE-2020-7570 | Medium | 5.4 | 2020-11-19 | A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebRe… |