Login Request a demo
CR
Product
Custom Reports
by Schneider-electric · last CVE Mar 21, 2023
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities8Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Custom Reports to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27984
8.8
1%
Mar 21
A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens…
Affected: through 16.0.0.23040
CVE-2023-27981
8.8
1%
Mar 21
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a…
Affected: through 16.0.0.23040
CVE-2023-27982
8.8
0%
Mar 21
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report…
Affected: through 16.0.0.23040
CVE-2023-27980
8.8
1%
Mar 21
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS…
Affected: through 16.0.0.23040
CVE-2023-27978
7.8
6%
Mar 21
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to…
Affected: through 16.0.0.23040
CVE-2023-27979
6.5
0%
Mar 21
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this…
Affected: through 16.0.0.23040
CVE-2023-27983
5.3
0%
Mar 21
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report…
Affected: through 16.0.0.23040
CVE-2023-27977
5.3
0%
Mar 21
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory,…
Affected: through 16.0.0.23040
Showing 8