KLA10049 CI vulnerability in APC PowerChute

A cross-site scripting vulnerability was found in PowerChute. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited from the network at a point related to unknown vectors.

Original advisories

vulnerability description

Related products

APC-PowerChute-Business-Edition

CVE list

CVE-2011-4263 warning

Solution

Update to latest version

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

• Schneider Electric APC PowerChute Buisness Edidtion versions 8.5 and earlier