CVE-2018-7787

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 56.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Schneider-electric U.motion BuilderSchneider Electric SE U.motion Builder
Timeline
PublishedJul 3
Latest updateMay 14

Description

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5schneider_electric_se/u.motion_builderU.motion Builder, all versions prior to 1.3.4

🔴Vulnerability Details

2
GHSA
GHSA-w7rq-mwf7-vprq: In Schneider Electric U↗2022-05-14
▶
CVEList
CVE-2018-7787: In Schneider Electric U↗2018-07-03
▶