CVE-2018-7786: XSS
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Schneider Electric U.motion Builderto a version that resolves this vulnerability.Fixed in v1.3.4
Event History
Frequently Asked Questions
What is CVE-2018-7786?
CVE-2018-7786 is a cross-site scripting (XSS) vulnerability in Schneider Electric U.motion Builder software versions prior to v1.3.4.
How severe is CVE-2018-7786?
CVE-2018-7786 has a severity score of 6.1, which is considered medium.
What is the affected software for CVE-2018-7786?
The affected software for CVE-2018-7786 is Schneider Electric U.motion Builder versions prior to v1.3.4.
How can an attacker exploit CVE-2018-7786?
An attacker can exploit CVE-2018-7786 by injecting malicious scripts through the cross-site scripting vulnerability.
Are there any fixes available for CVE-2018-7786?
Yes, you can fix CVE-2018-7786 by updating Schneider Electric U.motion Builder software to version 1.3.4 or later.