Schneider ELectric EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module

• CVE-2023-5987 Medium 6.1 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers 0.4%
• CVE-2023-5986 High 8.2 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers ca 0.5%