CVE-2023-29028

Rockwell ArmorStart ST is affected by CVE-2023-29028, a cross-site scripting (XSS) vulnerability. A malicious user with admin privileges and network access could view user data, modify the web interface, and potentially disrupt web page availability. Affected product: ArmorStart ST (ArmorStart ST...

CVE-2023-29028 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29028 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29027 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29027 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29027

CVE-2023-29027 affects Rockwell Automation ArmorStart ST. It is described as a cross-site scripting vulnerability caused by improper input validation. Exploitation details in the provided materials indicate that a malicious user with admin privileges and network access could view user data, modif...

CVE-2023-29026 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29026 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29026

The CVE-2023-29026 issue is a Cross-Site Scripting (XSS) vulnerability in Rockwell ArmorStart ST. The affected products are ArmorStart ST (notably ArmorStart ST281E v2.004.06+ and ArmorStart ST284E/ST280E all versions). The root cause is improper input handling allowing a malicious user with admi...

CVE-2023-29025

Rockwell ArmorStart ST is reported vulnerable to CVE-2023-29025: a cross-site scripting flaw that could let a malicious user with admin privileges and network access view user data and modify the web interface, with potential web page interruptions. CVSS details present: NVD score 5.9 (AV:N/AC:L/...

CVE-2023-29025 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

CVE-2023-29024 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a...

CVE-2023-29024

CVE-2023-29024 concerns Rockwell Automation’s ArmorStart ST. The vulnerability is a cross-site scripting (XSS) issue arising from insufficient input validation in the ArmorStart ST web interface, enabling a remote attacker to view or modify sensitive data or render pages unusable, with exploitati...

CVE-2023-29023

CVE-2023-29023 affects Rockwell Automation’s ArmorStart ST. The issue is a cross-site scripting vulnerability (improper input handling) that could allow a malicious user to view/modify sensitive data or render the web page unavailable, with exploitation requiring user interaction (e.g., phishing)...

CVE-2023-29023 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation...

CVE-2023-29030

CVE-2023-29030 : Cross-site scripting in Rockwell Automation’s ArmorStart ST. Vulnerable component: ArmorStart ST web interface; root cause described as improper input validation. Affects ArmorStart ST281E (2.004.06 and later) and ArmorStart ST284E/ST280E (all versions). Potential impact: attacke...

CVE-2023-29030 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation...

CVE-2023-29031

Summary: CVE-2023-29031 is a cross-site scripting vulnerability in Rockwell Automation ArmorStart ST, caused by improper input validation that could let an attacker view/modify sensitive data or render a web page unusable. The issue affects ArmorStart ST with ArmorStart ST281E (version 2.004.06+)...

CVE-2023-29031 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation...

Pimcore vulnerable to Business Logic Errors via Customer automation rules

Impact Business Logic Errors in the Conditions tab since the counter can be a negative number. This vulnerability is capable of the unlogic in the counter value in the Conditions tab. Patches Update to version 3.3.9 or apply this patch manually...