VDB-190195 · CVE-2022-22804 · SEVD-2022-011-07

Schneider Electric EcoStruxure Power Monitoring Expert up to 2020 Web Page Generation cross site scripting

A vulnerability was found in Schneider Electric EcoStruxure Power Monitoring Expert up to 2020 (SCADA Software). It has been declared as problematic. Affected by this vulnerability is an unknown code block of the component Web Page Generation Handler. Applying a patch is able to eliminate this problem.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	21
0	19

Field

source_cve_assigned	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

Commit Conf

90%	29
50%	10
70%	1

Approve Conf

90%	29
80%	10
70%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050150	01/15/2022	VulD...	cve_assigned	1641510000	cve.mitre.org	01/15/2022	accepted	70
12037071	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12037070	01/12/2022	VulD...	cvss3_meta_tempscore	2.5	see CVSS documentation	01/12/2022	accepted	90
12037069	01/12/2022	VulD...	cvss3_meta_basescore	2.6	see CVSS documentation	01/12/2022	accepted	90
12037068	01/12/2022	VulD...	cvss3_vuldb_tempscore	2.5	see CVSS documentation	01/12/2022	accepted	90
12037067	01/12/2022	VulD...	cvss3_vuldb_basescore	2.6	see CVSS documentation	01/12/2022	accepted	90
12037066	01/12/2022	VulD...	cvss2_vuldb_tempscore	1.8	see CVSS documentation	01/12/2022	accepted	90
12037065	01/12/2022	VulD...	cvss2_vuldb_basescore	2.1	see CVSS documentation	01/12/2022	accepted	90
12037064	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12037063	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12037062	01/12/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	01/12/2022	accepted	80
12037061	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12037060	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12037059	01/12/2022	VulD...	cvss2_vuldb_ai	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037058	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12037057	01/12/2022	VulD...	cvss2_vuldb_ci	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037056	01/12/2022	VulD...	cvss2_vuldb_ac	H	derived from vuldb v3 vector	01/12/2022	accepted	80
12037055	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12037054	01/12/2022	VulD...	type	SCADA Software		01/12/2022	accepted	90
12037053	01/12/2022	VulD...	date	1641942000 (01/12/2022)		01/12/2022	accepted	90