Schneider Electric U.Motion Builder vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Schneider Electric U.Motion Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2017-9958schneider electric seu.motion+1
EPSS score
0.34%
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attacker to execute arbitrary code under the context of root.5.3CVE-2017-9960schneider electric seu.motion+1
EPSS score
1.06%
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.9.8CVE-2017-7974schneider electric seu.motion+1
EPSS score
4.61%
A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can execute arbitrary code and exfiltrate files.9.8CVE-2017-7973schneider electric seu.motion+1
EPSS score
1.47%
A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an unauthenticated user can use calls to various paths allowing performance of arbitrary SQL commands against the underlying database.