CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
vulnerability exists when an authenticated attacker modifies folder names within the context of
the product.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EcoStruxure Power Monitoring Expert (PME) 2021
Vendor
Schneider Electric
Product
EcoStruxure Power Monitoring Expert (PME) 2021
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Monitoring Expert (PME) 2021 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2021 CU1 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power Monitoring Expert (PME) 2020
Vendor
Schneider Electric
Product
EcoStruxure Power Monitoring Expert (PME) 2020
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Monitoring Expert (PME) 2020 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2020 CU3 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power Operation (EPO) 2022
Vendor
Schneider Electric
Product
EcoStruxure Power Operation (EPO) 2022
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Operation (EPO) 2022 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CU4 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power Operation (EPO) 2022 – Advanced Reporting and Dashboards Module
Vendor
Schneider Electric
Product
EcoStruxure Power Operation (EPO) 2022 – Advanced Reporting and Dashboards Module
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Operation (EPO) 2022 – Advanced Reporting and Dashboards Module · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CU4 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power Operation (EPO) 2021
Vendor
Schneider Electric
Product
EcoStruxure Power Operation (EPO) 2021
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Operation (EPO) 2021 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CU4 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power Operation (EPO) 2021 – Advanced Reporting and Dashboards Module
Vendor
Schneider Electric
Product
EcoStruxure Power Operation (EPO) 2021 – Advanced Reporting and Dashboards Module
Platforms
Unknown
Default status
unaffected
EcoStruxure Power Operation (EPO) 2021 – Advanced Reporting and Dashboards Module · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CU3 with Hotfix 2 and prior
affected
Unavailable
Unavailable
Unavailable
None listed
EcoStruxure Power SCADA Operation 2020 (PSO) - Advanced Reporting and Dashboards Module
Vendor
Schneider Electric
Product
EcoStruxure Power SCADA Operation 2020 (PSO) - Advanced Reporting and Dashboards Module
Platforms
Unknown
Default status
unaffected
EcoStruxure Power SCADA Operation 2020 (PSO) - Advanced Reporting and Dashboards Module · Scoped product and version facts