Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-19	CVE-2020-7573	Unspecified vulnerability in Schneider-Electric Webreports 1.9/3.1 A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control. network low complexity schneider-electric	6.5
2020-11-19	CVE-2020-7571	Unspecified vulnerability in Schneider-Electric Webreports 1.9/3.1 A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of user supplied data and achieve a Cross-Site Scripting reflected attack against other WebReport users. network low complexity schneider-electric	5.4
2020-11-19	CVE-2020-7570	Unspecified vulnerability in Schneider-Electric Webreports 1.9/3.1 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Cross-Site Scripting stored attack against other WebReport users. network low complexity schneider-electric	5.4