Lucene search
HistoryApr 18, 2023 - 9:15 p.m.
CVE-2023-25553
cwe-79
cross-site scripting
dce endpoint
struxureware data center expert
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
A CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site
Scripting’) vulnerability exists on a DCE endpoint through the logging capabilities of the
webserver.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Affected configurations
Node
schneider-electricstruxureware_data_center_expertRange≤7.9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | struxureware_data_center_expert | * | cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-25553
2023-04-18 21:15:08
prion
prion
Cross site scripting
2023-04-18 21:15:00
cvelist
cvelist
CVE-2023-25553
2023-04-18 20:38:01
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for NVD:CVE-2023-25553