Webreports (Schneider-electric) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-11-19. Vendor: Schneider-electric.

CVEs of Webreports

• CVE-2020-7570 - CVSS 5.4 (medium), 2020-11-19: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation…
• CVE-2020-7573 - CVSS 6.5 (medium), 2020-11-19: A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able…
• CVE-2020-7569 - CVSS 8.8 (high), 2020-11-19: A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an…
• CVE-2020-7572 - CVSS 8.8 (high), 2020-11-19: A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause…
• CVE-2020-7571 - CVSS 5.4 (medium), 2020-11-19: A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building…