Skip to content
OpenAdvisories
Unscored CVE-2022-22804 EUVD-2022-27947GHSA-m9fg-jg2j-wc72

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an aut…

Published Feb 4, 2022 · Updated Aug 3, 2024 · Assigned by schneider

Description

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits a page containing the injected payload. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)

Affected products

VendorProductAffectedFixed
— EcoStruxure Power Monitoring Expert (Versions 2020 and prior) EcoStruxure Power Monitoring Expert (Versions 2020 and prior) —

Advisories 1

References