Schneider Electric U.motion Builder SQL Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/04/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| u.motion builder | = 1.3.4 |
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free