Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:u.motion_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductU.Motion Builder (a7c83740-654f-5691-ab8f-1bc79a0671e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-7787 vulnerable 2026-06-08 05:12:04.215480 Details available
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.
Published: 2018-07-03T14:00:00.000Z
Updated: 2024-09-17T02:48:14.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7786 vulnerable 2026-06-08 05:12:04.215083 Details available
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.
Published: 2018-07-03T14:00:00.000Z
Updated: 2024-09-17T02:06:28.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7785 vulnerable 2026-06-08 05:12:04.214671 Details available
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.
Published: 2018-07-03T14:00:00.000Z
Updated: 2024-09-16T18:08:37.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7777 vulnerable 2026-06-08 05:12:04.181264 Details available
The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server.
Published: 2018-07-03T14:00:00.000Z
Updated: 2024-09-17T03:23:36.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7776 vulnerable 2026-06-08 05:12:04.180975 Details available
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.
Published: 2018-07-03T14:00:00.000Z
Updated: 2024-09-16T23:26:56.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7774 vulnerable 2026-06-08 05:12:04.180520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7773 vulnerable 2026-06-08 05:12:04.180134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7772 vulnerable 2026-06-08 05:12:04.179758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7771 vulnerable 2026-06-08 05:12:04.179452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7769 vulnerable 2026-06-08 05:12:04.176607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7768 vulnerable 2026-06-08 05:12:04.176345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7767 vulnerable 2026-06-08 05:12:04.176075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7766 vulnerable 2026-06-08 05:12:04.175788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7765 vulnerable 2026-06-08 05:12:04.175312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7764 vulnerable 2026-06-08 05:12:04.174971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7763 vulnerable 2026-06-08 05:12:04.174470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9960 vulnerable 2026-06-08 05:10:20.172942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9959 vulnerable 2026-06-08 05:10:20.172638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9958 vulnerable 2026-06-08 05:10:20.172346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9957 vulnerable 2026-06-08 05:10:20.172020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9956 vulnerable 2026-06-08 05:10:20.171602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7974 vulnerable 2026-06-08 05:10:06.641407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7973 vulnerable 2026-06-08 05:10:06.640968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.