CVE-2023-2266mediumCWE-79

CVE-2023-2266: falha de média gravidade em Schweitzer Engineering Laboratories SEL-411L

Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SEL-411L

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.4%
An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
Schweitzer Engineering Laboratories · SEL-411L
CVEs relacionadas — Schweitzer Engineering Laboratories SEL-411L

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2267MEDIUMImproper input validation could lead to reflection injection attacksEPSS 0.4%CVE-2023-2265MEDIUMImproper restriction of rendered UI layers or frames could lead to clickjacking attackEPSS 0.4%CVE-2023-2264MEDIUMImproper input validition could lead to code injectionEPSS 0.2%