Vulnerability Details CVE-2023-5987
A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)
vulnerability that could cause a vulnerability leading to a cross site scripting condition where
attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing
the injected payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.8%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-5987
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:2020
-
cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:2021