Known vulnerabilities in EcoWebServerIII MES3-255C-EN

Vendor: Mitsubishi Electric
Software: EcoWebServerIII MES3-255C-EN
Software CPE: cpe:2.3:a:mitsubishi_electric:ecowebserveriii_mes3-255c-en:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EcoWebServerIII MES3-255C-EN EcoWebServerIII MES3-255C-EN is affected by 9 known vulnerabilities: 1 medium, 8 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60879 - Improper input validation
CVE-2020-7746		 CWE-20 Medium
No
No
 3.3.1 25.02.2022 SB2020102964
SB2022022516
SB2022100554
and 3 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 3.3.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 3.3.1 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 3.3.1 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331		 CWE-79 Low
No
No
 3.3.1 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676		 CWE-79 Low
No
No
 3.3.1 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 3.3.1 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 3.3.1 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more
#VU11300 - Resource exhaustion
CVE-2017-18214		 CWE-400 Low
No
No
 3.3.1 28.03.2018 SB2017090813
SB2022022516
SB2022101031
and 8 more