Количество 3
Количество 3
CVE-2020-7570
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users.
GHSA-95w2-x8cx-c96f
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users.
BDU:2021-01790
Уязвимость сервера отчетов WebReports, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю загрузить вредоносные файлы и выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-7570 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users. | CVSS3: 5.4 | 0% Низкий | около 5 лет назад |
| GHSA-95w2-x8cx-c96f A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users. | 0% Низкий | больше 3 лет назад | |
 | BDU:2021-01790 Уязвимость сервера отчетов WebReports, связанная с недостаточной защитой структуры веб-страницы, позволяющая нарушителю загрузить вредоносные файлы и выполнить произвольный код | CVSS3: 5.4 | 0% Низкий | около 5 лет назад |
Уязвимостей на страницу