CVE-2014-5411

MEDIUM · 4.9 CVSS Gepubliceerd: 18-09-2014 CWE-79

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Vendors

Aveva Schneider-electric

Affected products

Clearscada Scada Expert Clearscada

References

github.com
www.cisa.gov
ics-cert.us-cert.gov