CVE-2024-31414CWE-79

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages

Medium · published September 13, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sanitization on the server-side, which could lead to injection and execution of malicious scripts when abused by bad actors.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-09-13T16:46Z
EPSS history
Timeline
  • 13 SEP 16:46Z
    The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages
    cvelistv5