Custom Reports (Schneider-electric) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-03-21. Vendor: Schneider-electric.
CVEs of Custom Reports
- CVE-2023-27983 - CVSS 6.5 (medium), 2023-03-21: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the…
- CVE-2023-27979 - CVSS 6.5 (medium), 2023-03-21: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project…
- CVE-2023-27977 - CVSS 6.5 (medium), 2023-03-21: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project…
- CVE-2023-27984 - CVSS 8.8 (high), 2023-03-21: A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code…
- CVE-2023-27981 - CVSS 8.8 (high), 2023-03-21: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a…
- CVE-2023-27978 - CVSS 7.8 (high), 2023-03-21: A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data,…
- CVE-2023-27982 - CVSS 8.8 (high), 2023-03-21: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS…
- CVE-2023-27980 - CVSS 8.8 (high), 2023-03-21: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious…
