Approved changes feed: RSS · Atom

cpe:2.3:a:schneider_electric:ecostruxure_power_operation_(epo)_–_advanced_reporting_and_dashboards_module:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5)
ProductEcostruxure Power Operation (Epo) – Advanced Reporting And Dashboards Module (ab0b35b6-87af-55fd-850b-e98487094f9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5987 vulnerable 2026-06-08 06:19:45.325815 Details available
MEDIUM (6.1)
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.
Published: 2023-11-15T03:48:50.993Z
Updated: 2024-08-02T08:14:25.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5986 vulnerable 2026-06-08 06:19:45.319898 Details available
HIGH (8.2)
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.
Published: 2023-11-15T03:47:17.684Z
Updated: 2024-12-02T21:11:40.870Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.