Version EcoStruxure Power SCADA Operation (PSO) 2020 or 2020 R2
OTHER
2 CVEs
Known Vulnerabilities
CVE-2023-5987
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.
MEDIUM
CVSS 6.1
Published Nov 15, 2023
CVE-2023-5986
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.
HIGH
CVSS 8.2
Published Nov 15, 2023