CVE-2023-37198

概要

参考情報

• download.schneider-electric.com/files · Vendor Advisory

struxureware data center expert のその他の脆弱性

• CVE-2026-8045中 6.5CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side fi…
• CVE-2023-37199高 7.2 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an adm…
• CVE-2023-37197高 8.8 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that co…
• CVE-2023-37196高 8.8 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that coul…
• CVE-2023-25555高 8.1 A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists tha…