CVE-2023-5987
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cybersecurity@se.com
- Published
- 2023-11-15
- Last modified
- 2024-08-02
- Weaknesses
- CWE-79
Affected products
- Ecostruxure Power Monitoring Expert (Schneider-electric)
- Ecostruxure Power Monitoring Expert Pme (Schneider Electric)
- Ecostruxure Power Operation Epo Advanced Reporting And Dashboards Module (Schneider Electric)
- Ecostruxure Power Scada Operation Pso - Advanced Reporting And Dashboards Module (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_…
