Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2024-31414

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lac

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Eaton

Description

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sanitization on the server-side, which could lead to injection and execution of malicious scripts when abused by bad actors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton Foreseer

Default version status: affected

  • 0 to < 7.8.600affected

References