Cross site scripting

2014-09-1810:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
clearscadaeq2010 r3
clearscadaeq2010 r3.1
clearscadaeq2013 r1
clearscadaeq2013 r1.1
clearscadaeq2013 r1.1a
clearscadaeq2013 r1.2
clearscadaeq2013 r2
scada_expert_clearscadaeq2014 r1
scada_expert_clearscadaeq2013 r2.1

Name	Operator	Version
clearscada	eq	2010 r3
clearscada	eq	2010 r3.1
clearscada	eq	2013 r1
clearscada	eq	2013 r1.1
clearscada	eq	2013 r1.1a
clearscada	eq	2013 r1.2
clearscada	eq	2013 r2
scada_expert_clearscada	eq	2014 r1
scada_expert_clearscada	eq	2013 r2.1