CVE-2020-28210

A CWE-79 Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser...

PT-2019-6004

Name of the Vulnerable Software and Affected Versions EcoStruxure Building Operation WebStation versions 2.0 through 3.1 Description A Cross-site Scripting issue exists due to improper neutralization of input during web page generation, allowing an attacker to inject HTML and JavaScript code into...