Medium severity6.1NVD Advisory· Published Nov 19, 2020· Updated May 28, 2026
CVE-2020-28210
CVE-2020-28210
Description
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.
Affected products
2- EcoStruxure Building Operation/WebStationdescription
- Range: V2.0 - V3.1
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-315-04/nvdVendor Advisory
News mentions
0No linked articles in our index yet.