Schneider Electric Ecostruxure Power Monitoring Expert (Pme) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Schneider Electric Ecostruxure Power Monitoring Expert (Pme), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.3CVE-2024-9005schneider electricecostruxure power monitoring expert (pme)
EPSS score
0.34%
CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.8.2CVE-2023-5986schneider electricecostruxure power monitoring expert (pme)+3
EPSS score
0.45%
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.6.1CVE-2023-5987schneider electricecostruxure power monitoring expert (pme)+3
EPSS score
0.41%
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.