Login Request a demo
UB
Product
U.motion Builder
by Schneider Electric · last CVE May 22, 2019
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 5High 12Medium 7Low 0
Severity
All severities24Critical5High12Medium7Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add U.motion Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7777
8.8
32%
Jul 3
The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7774
8.8
1%
Jul 3
The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7773
8.8
1%
Jul 3
The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7772
8.8
1%
Jul 3
The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7769
8.8
1%
Jul 3
The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7768
8.8
1%
Jul 3
The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7767
8.8
1%
Jul 3
The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7766
8.8
1%
Jul 3
The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7765
8.8
3%
Jul 3
The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2018-7771
8.0
1%
Jul 3
The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
Affected: before 1.3.4
CVE-2017-9958
7.8
0%
Sep 26
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system…
Affected: through 1.2.1
CVE-2017-9956
7.3
1%
Sep 26
An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system contains a hard-coded valid session
Affected: through 1.2.1
Showing 12