Lucene search
Japan Vulnerability NotesJVN:61695284HistoryDec 02, 2011 - 12:00 a.m.
JVN#61695284: PowerChute Business Edition vulnerable to cross-site scripting
2011-12-0200:00:00
Japan Vulnerability Notes
jvn.jp
9
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
49.0%
PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability.
Impact
An arbitrary script may be executed on the user’s web browser.
Solution
Upgrade the software
Upgrade to the latest version according to the information provided by the developer.
Products Affected
- PowerChute Business Edition versions prior to 8.5
Related
kaspersky
kaspersky
KLA10049 CI vulnerability in APC PowerChute
2011-12-07 00:00:00
cve
cve
CVE-2011-4263
2011-12-07 19:55:01
openvas
openvas
prion
prion
Cross site scripting
2011-12-07 19:55:00
cvelist
cvelist
CVE-2011-4263
2011-12-07 19:00:00
nvd
nvd
CVE-2011-4263
2011-12-07 19:55:01
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
49.0%
Related for JVN:61695284