SD
Product
Struxureware Data Center Expert
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 25Low 2
Watch
Add Struxureware Data Center Expert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25550 | 9.8 | Apr 18 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted… Affected: through 7.9.2 |
| CVE-2023-25549 | 9.8 | Apr 18 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings… Affected: through 7.9.2 |
| CVE-2021-22795 | 9.8 | Apr 13 | A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over… Affected: through 7.8.1 |
| CVE-2021-22794 | 9.8 | Apr 13 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution Affected: through 7.8.1 |
| CVE-2018-1126 | 9.8 | May 23 | procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues Affected: before 7.6.0 |
| CVE-2023-37197 | 8.8 | Jul 12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on… Affected: through 7.9.3 |
| CVE-2023-37196 | 8.8 | Jul 12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on… Affected: through 7.9.3 |
| CVE-2023-25547 | 8.8 | Apr 18 | A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account Affected: through 7.9.2 |
| CVE-2018-7807 | 8.8 | Nov 30 | Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server Affected: through 7.5.0 |
| CVE-2018-2814 | 8.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: before 7.6.0 |
| CVE-2018-2633 | 8.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0 |
| CVE-2023-25555 | 8.1 | Apr 18 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to… Affected: through 7.9.2 |
| CVE-2023-25552 | 8.1 | Apr 18 | A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when… Affected: through 7.9.2 |
| CVE-2023-25554 | 7.8 | Apr 18 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance… Affected: through 7.9.2 |
| CVE-2018-1124 | 7.8 | May 23 | procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function Affected: before 7.6.0 |
| CVE-2018-2794 | 7.7 | Apr 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security) Affected: before 7.6.0 |
| CVE-2018-2811 | 7.7 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install) Affected: before 7.6.0 |
| CVE-2018-2637 | 7.4 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: before 7.6.0 |
| CVE-2023-37199 | 7.2 | Jul 12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups… Affected: through 7.9.3 |
| CVE-2023-37198 | 7.2 | Jul 12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with… Affected: through 7.9.3 |
| CVE-2018-2634 | 6.8 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS) Affected: before 7.6.0 |
| CVE-2017-8371 | 6.8 | Apr 30 | Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via… Affected: through 7.3.1 |
| CVE-2026-8045 | 6.5 | Jun 9 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a… Affected: before 9.1.2 |
| CVE-2023-25548 | 6.5 | Apr 18 | A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a… Affected: through 7.9.2 |
| CVE-2018-2582 | 6.5 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: before 7.6.0 |
| CVE-2023-25553 | 6.1 | Apr 18 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the… Affected: through 7.9.2 |
| CVE-2023-25551 | 6.1 | Apr 18 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters… Affected: through 7.9.2 |
| CVE-2018-2641 | 6.1 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0 |
| CVE-2018-2618 | 5.9 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: before 7.6.0 |
| CVE-2018-2815 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: before 7.6.0 |
| CVE-2018-2799 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP) Affected: before 7.6.0 |
| CVE-2018-2798 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0 |
| CVE-2018-2797 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: before 7.6.0 |
| CVE-2018-2796 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: before 7.6.0 |
| CVE-2018-2795 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: before 7.6.0 |
| CVE-2018-2657 | 5.3 | Jan 18 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: before 7.6.0 |
| CVE-2018-2629 | 5.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS) Affected: before 7.6.0 |
| CVE-2018-2603 | 5.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: before 7.6.0 |
| CVE-2018-2599 | 4.8 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0 |
| CVE-2018-2602 | 4.5 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n) Affected: before 7.6.0 |
| CVE-2018-2678 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0 |
| CVE-2018-2677 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0 |
| CVE-2018-2663 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: before 7.6.0 |
| CVE-2018-2588 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP) Affected: before 7.6.0 |
| CVE-2018-2800 | 4.2 | Apr 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI) Affected: before 7.6.0 |
| CVE-2018-2579 | 3.7 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: before 7.6.0 |
| CVE-2018-2790 | 3.1 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: before 7.6.0 |
Showing 47