CVE-2018-7786

—

CVSS 3.0

6.1 medium

EPSS

<1%p53

Published

Jul 3, 2018 (Jul 3, 2018)

Modified

Jun 17, 2026

Description

In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.

Vendors: schneider-electric
Products: u.motion builder
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news1 stories

Two Critical flaws affect Schneider Electric U.motion Builder. Patch them now!

Security AffairsJun 17, 13:47 UTC · Jun 17, 2018Vulnerability CVE-2018-7784 CVE-2018-7785 CVE-2018-7786+1 CVEs