Medium severity6.1NVD Advisory· Published Nov 19, 2020· Updated Jun 17, 2026
CVE-2020-28210
CVE-2020-28210
Description
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.
Affected products
4- cpe:2.3:a:schneider-electric:ecostruxure_building_operation:*:*:*:*:*:*:*:*Range: >=2.0,<=3.1
- EcoStruxure Building Operation/WebStationdescription
- Range: 2.0 - 3.1
- Range: 2.0 - 3.1
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-315-04/nvdVendor Advisory
News mentions
0No linked articles in our index yet.