U.motion Builder (Schneider-electric) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-05-22. Vendor: Schneider-electric.

CVEs of U.motion Builder

• CVE-2018-7841 - CVSS 9.8 (critical), 2019-05-22: A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of…
• CVE-2018-7777 - CVSS 8.8 (high), 2018-07-03: The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software…
• CVE-2018-7787 - CVSS 5.3 (medium), 2018-07-03: In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in…
• CVE-2018-7776 - CVSS 4.3 (medium), 2018-07-03: The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the…
• CVE-2018-7786 - CVSS 6.1 (medium), 2018-07-03: In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of…
• CVE-2018-7774 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite…
• CVE-2018-7785 - CVSS 9.8 (critical), 2018-07-03: In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.
• CVE-2018-7766 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying…
• CVE-2018-7769 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite…
• CVE-2018-7773 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite…
• CVE-2018-7765 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying…
• CVE-2018-7768 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite…
• CVE-2018-7772 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to…
• CVE-2018-7764 - CVSS 4.3 (medium), 2018-07-03: The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal…
• CVE-2018-7767 - CVSS 8.8 (high), 2018-07-03: The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite…
• CVE-2018-7771 - CVSS 8 (high), 2018-07-03: The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal…
• CVE-2018-7763 - CVSS 4.3 (medium), 2018-07-03: The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory…
• CVE-2017-7973 - CVSS 9.8 (critical), 2017-09-26: A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls…
• CVE-2017-9957 - CVSS 9.8 (critical), 2017-09-26: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account…
• CVE-2017-9960 - CVSS 5.3 (medium), 2017-09-26: An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to…
• CVE-2017-9956 - CVSS 7.3 (high), 2017-09-26: An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a…
• CVE-2017-9959 - CVSS 5.5 (medium), 2017-09-26: A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from…
• CVE-2017-7974 - CVSS 9.8 (critical), 2017-09-26: A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an…
• CVE-2017-9958 - CVSS 7.8 (high), 2017-09-26: An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of…