Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
8.2HIGH3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Product Status

Learn more

Versions 2 Total

Default Status: unaffected

affected

  • affected at Version 2020 CU2 and prior 
  • affected at Version 2021 CU1 and prior 

Versions 2 Total

Default Status: unaffected

affected

  • affected at Advanced Reporting and Dashboards Module 2021 prior to CU2 for EcoStruxure Power Operation 2021 
  • affected at Advanced Reporting and Dashboards Module 2020 prior to CU3 

Versions 1 Total

Default Status: unaffected

affected

  • affected at EcoStruxure Power SCADA Operation (PSO) 2020 or 2020 R2 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.

Authorized Data Publishers

Learn more