CVE-2020-28210

MEDIUM 6.1CVE-2020-28210 · Published 19/11/2020 · updated 17/06/2026

In short

CVE-2020-28210 is a MEDIUM (CVSS 6.1) vulnerability affecting ecostruxure building operation (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 57.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ecostruxure building operation schneider-electric	`≥ 2.0, ≤ 3.1`	No fix yet

Description

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.

References

se.com/ww/en/download/document/SEVD-2020-315-04 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free