CVE-2023-5986 (published 2023-11-15T03:47:17.684Z)

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input
attackers can cause the software’s web application to redirect to the chosen domain after a
successful login is performed. 



Affected products: Vendor: Schneider Electric
Product: EcoStruxure Power Monitoring Expert (PME)
Versions: Version 2020 CU2 and prior, Version 2021 CU1 and prior