CVE-2018-7787

Summary

In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request.

Affected Software

VendorProductVersion RangeStatus
Schneider Electric SEU.motion BuilderU.motion Builder, all versions prior to 1.3.4affected

Weaknesses

  • Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References