Ecostruxure™ It Data Center Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:ecostruxure™_it_data_center_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Ecostruxure™ It Data Center Expert (9779ae6a-b4c9-5b85-a6f8-c8278112281e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8045 |
vulnerable | 2026-07-29 01:09:05.444419 |
Details available
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.
Published: 2026-06-09T14:41:56.266Z
Updated: 2026-06-09T16:01:11.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6438 |
vulnerable | 2026-06-08 07:43:15.061272 |
Details available
A
CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could
cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access
when the server is accessed via the network using an application account.
Published: 2025-07-11T09:06:32.411Z
Updated: 2025-11-03T20:07:07.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50125 |
vulnerable | 2026-06-08 07:31:10.467207 |
Details available
A
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote
code execution when the server is accessed via the network with knowledge of hidden URLs and manipulation
of host request header.
Published: 2025-07-11T10:45:49.286Z
Updated: 2025-11-03T20:05:40.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50124 |
vulnerable | 2026-06-08 07:31:10.466795 |
Details available
A
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the
server is accessed by a privileged account via a console and through exploitation of a setup script.
Published: 2025-07-11T10:49:05.761Z
Updated: 2025-11-03T20:05:39.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50123 |
vulnerable | 2026-06-08 07:31:10.466501 |
Details available
A
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote
command execution by a privileged account when the server is accessed via a console and through
exploitation of the hostname input.
Published: 2025-07-11T10:08:36.560Z
Updated: 2025-11-04T22:06:41.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50122 |
vulnerable | 2026-06-08 07:31:10.466183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50121 |
vulnerable | 2026-06-08 07:31:10.465788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.