Vulnerability Details CVE-2023-5986
A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input
attackers can cause the software’s web application to redirect to the chosen domain after a
successful login is performed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.3%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2023-5986
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:2020
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:2021