CVE-2018-7787

2018-07-0314:00:00

schneider

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.

CNA Affected

[
  {
    "product": "U.motion Builder",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "U.motion Builder, all versions prior to 1.3.4"
      }
    ]
  }
]