Struxureware Data Center Expert vulnerabilities | LiveThreat CVE Feed

Product

Struxureware Data Center Expert

by Schneider-electric · last CVE Jun 9, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities47 In the news1 Timeline

Severity mix

Critical 5High 15Medium 25Low 2

Severity

All severities47 Critical5 High15 Medium25 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Struxureware Data Center Expert to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-2634	6.8	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS) Affected: before 7.6.0
CVE-2017-8371	6.8	1%	Apr 30	Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers to obtain sensitive information via… Affected: through 7.3.1
CVE-2026-8045	6.5	0%	Jun 9	CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a… Affected: before 9.1.2
CVE-2023-25548	6.5	1%	Apr 18	A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a… Affected: through 7.9.2
CVE-2018-2582	6.5	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: before 7.6.0
CVE-2023-25553	6.1	0%	Apr 18	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the… Affected: through 7.9.2
CVE-2023-25551	6.1	0%	Apr 18	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters… Affected: through 7.9.2
CVE-2018-2641	6.1	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0
CVE-2018-2618	5.9	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: before 7.6.0
CVE-2018-2815	5.3	5%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: before 7.6.0
CVE-2018-2799	5.3	15%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP) Affected: before 7.6.0
CVE-2018-2798	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0
CVE-2018-2797	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: before 7.6.0
CVE-2018-2796	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: before 7.6.0
CVE-2018-2795	5.3	7%	Apr 19	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: before 7.6.0
CVE-2018-2657	5.3	8%	Jan 18	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: before 7.6.0
CVE-2018-2629	5.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS) Affected: before 7.6.0
CVE-2018-2603	5.3	7%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: before 7.6.0
CVE-2018-2599	4.8	4%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0
CVE-2018-2602	4.5	1%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n) Affected: before 7.6.0
CVE-2018-2678	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0
CVE-2018-2677	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: before 7.6.0
CVE-2018-2663	4.3	5%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: before 7.6.0
CVE-2018-2588	4.3	3%	Jan 18	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP) Affected: before 7.6.0
CVE-2018-2800	4.2	5%	Apr 19	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI) Affected: before 7.6.0