VYPR

EcoStruxure Building Operation WebStation

by Schneider Electric

CVEs (1)

  • CVE-2020-28210MedNov 19, 2020
    risk 0.40cvss 6.1epss 0.01

    A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.