CVE-2023-5987

published 2023-11-15

CVE-2023-5987: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross…

Priority P4 24 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
vulnerability that could cause a vulnerability leading to a cross site scripting condition where
attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing
the injected payload.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider-electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_monitoring_expert	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_operation_advanced_reporting_and_dashboards_module	—	—
schneider_electric	ecostruxure_power_scada_operation_advanced_reporting_and_dashboards_module	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79