U.motion Server

CVEs (25)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-6835	U.motion U.motion Server	Med	0.35	5.4	0.01	Sep 17, 2019	A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an…
CVE-2017-9960	Schneider Electric U.motion Builder	Med	0.35	5.3	0.01	Sep 26, 2017	An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.
CVE-2018-7776	Schneider Electric U.motion Builder	Med	0.28	4.3	0.01	Jul 3, 2018	The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.
CVE-2018-7764	Schneider Electric U.motion Builder	Med	0.28	4.3	0.01	Jul 3, 2018	The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.
CVE-2018-7763	Schneider Electric U.motion Builder	Med	0.28	4.3	0.01	Jul 3, 2018	The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.

CVE-2019-6835MedSep 17, 2019
U.motion
U.motion Server
risk 0.35cvss 5.4epss 0.01
A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an…
CVE-2017-9960MedSep 26, 2017
Schneider Electric
U.motion Builder
risk 0.35cvss 5.3epss 0.01
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.
CVE-2018-7776MedJul 3, 2018
Schneider Electric
U.motion Builder
risk 0.28cvss 4.3epss 0.01
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.
CVE-2018-7764MedJul 3, 2018
Schneider Electric
U.motion Builder
risk 0.28cvss 4.3epss 0.01
The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.
CVE-2018-7763MedJul 3, 2018
Schneider Electric
U.motion Builder
risk 0.28cvss 4.3epss 0.01
The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.

Page 2 of 2