CVE-2023-5987: XSS
Published Nov 15, 2023
·Updated
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.
Affected Software
5 affected components
Schneider-electric Ecostruxure Power Monitoring Expert=2020
Schneider-electric Ecostruxure Power Monitoring Expert=2020-cumulative_update_1
Schneider-electric Ecostruxure Power Monitoring Expert=2020-cumulative_update_2
Schneider-electric Ecostruxure Power Monitoring Expert=2021
Schneider-electric Ecostruxure Power Monitoring Expert=2021-cumulative_update_1
Remediation
Event History
Nov 15, 2023
CVE Published
03:48 AM
Data Sourced
03:48 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-5987.
2
What is the severity of CVE-2023-5987?
The severity of CVE-2023-5987 is medium (6.1).
3
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-79.
4
How does CVE-2023-5987 affect Schneider-electric Ecostruxure Power Monitoring Expert (2020)?
CVE-2023-5987 affects Schneider-electric Ecostruxure Power Monitoring Expert (2020) and its cumulative updates (2020-cumulative_update_1 and 2020-cumulative_update_2).
5
How can I fix CVE-2023-5987?
To fix CVE-2023-5987, it is recommended to apply the security update provided by Schneider Electric.