Schneider Electric SE U.Motion Builder vulnerabilities

4 vulnerabilities

Known vulnerabilities in Schneider Electric SE U.Motion Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-7786schneider electric seu.motion builder+1
EPSS score
0.75%
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.5.3CVE-2018-7787schneider electric seu.motion builder+1
EPSS score
1.09%
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.9.8CVE-2018-7784schneider electric seu.motion builder+1
EPSS score
2.27%
In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is evaluated as a command by the application. In this way, the attacker could execute code, read the stack, or cause a segmentation fault in the running application.9.8CVE-2018-7785schneider electric seu.motion builder+1
EPSS score
2.97%
In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.