Vulnetix
Try Vulnetix Request Demo
CVE-2020-28210 PUBLISHED CVSS 6.099999904632568 MEDIUM

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.

EPSS 0.37% · 58.8th percentile

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.37%
58.8th percentile

Affected Products

VendorProductVersions
n/aEcoStruxure Building Operation WebStation V2.0 - V3.1EcoStruxure Building Operation WebStation V2.0 - V3.1
schneider-electricecostruxure_building_operation2.0

Timeline

References

Open in Interactive Console →