Known vulnerabilities in U.motion Builder - page 2
Vendor:
Schneider Electric
Software:
U.motion Builder
Software CPE:
cpe:2.3:a:schneider_electric:umotion_builder:*:*:*:*:*:*:*:*
Total vulnerabilities:
28
Public exploits:
4
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (28)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU11643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-7763 |
CWE-22 | Low | - | 10.04.2018 |
SB2018041010 |
||
| #VU7267 - Exposure of sensitive information to an unauthorized actor CVE-2017-9960 |
CWE-200 | Low | - | 30.06.2017 |
SB2017063007 |
||
| #VU7266 - Improper Access Control CVE-2017-9959 |
CWE-284 | Low | - | 30.06.2017 |
SB2017063007 |
||
| #VU7265 - Improper Access Control CVE-2017-9958 |
CWE-284 | Low | - | 30.06.2017 |
SB2017063007 |
||
| #VU7264 - Use of Hard-coded Password CVE-2017-9957 |
CWE-259 | Low | - | 30.06.2017 |
SB2017063007 |
||
| #VU7263 - Improper Authentication CVE-2017-9956 |
CWE-287 | Low | - | 30.06.2017 |
SB2017063007 |
||
| #VU7262 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-7974 |
CWE-22 | High | - | 30.06.2017 |
SB2017063007 |
||
| #VU7261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-7973 |
CWE-89 | Low | - | 30.06.2017 |
SB2017063007 |
Showing elements 21 - 40 out of 28