CVE-2023-25553 (published 2023-04-18T20:38:01.298Z)













A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the
webserver. 





 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


Affected products: Vendor: Schneider Electric
Product: StruxureWare Data Center Expert
Versions: All