Advisories · Technology

EcoStruxure Building Operation WebReports V1.9 - V3.1.

Every CVE that names EcoStruxure Building Operation WebReports V1.9 - V3.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-7573 CVE record

Improper access control in EcoStruxure Building Operation WebReports V1.9 - V3.1
- EcoStruxure Building Operation WebReports V1.9 - V3.1
- Broken access control
Not analysed yet 19 Nov 2020
CVE-2020-7572 CVE record

XML external entity injection in EcoStruxure Building Operation WebReports V1.9 - V3.1
- EcoStruxure Building Operation WebReports V1.9 - V3.1
- XML external entities (XXE)
Not analysed yet 19 Nov 2020
CVE-2020-7571 CVE record

Cross-site scripting in EcoStruxure Building Operation WebReports V1.9 - V3.1
- EcoStruxure Building Operation WebReports V1.9 - V3.1
- Cross-site scripting (XSS)
Not analysed yet 19 Nov 2020
CVE-2020-7570 CVE record

Cross-site scripting in EcoStruxure Building Operation WebReports V1.9 - V3.1
- EcoStruxure Building Operation WebReports V1.9 - V3.1
- Cross-site scripting (XSS)
Not analysed yet 19 Nov 2020
CVE-2020-7569 CVE record

Unrestricted file upload in EcoStruxure Building Operation WebReports V1.9 - V3.1
- EcoStruxure Building Operation WebReports V1.9 - V3.1
- Unrestricted file upload
Not analysed yet 19 Nov 2020