Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Schweitzer Engineering Laboratories SEL-411L R118-V4, R119-V5 and 10 more versions Clear all filters
TI-2023-02126 CVE-2023-2267 · GHSA-fvhp-qrgg-98fg

Improper input validation could lead to reflection injection attacks

Priority LOW 25

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00405 Published 2023-11-30 Fixed in R118-V4, R119-V5 +10 CWE-20
TI-2023-02125 CVE-2023-2266 · GHSA-6vp4-j55c-qjx3

Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

Priority LOW 27

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00405 Published 2023-11-30 Fixed in R118-V4, R119-V5 +10 CWE-79
TI-2023-02124 CVE-2023-2265 · GHSA-fq9r-p3cq-895q

Improper restriction of rendered UI layers or frames could lead to clickjacking attack

Priority LOW 27

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and autho…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0039 Published 2023-11-30 Fixed in R118-V4, R119-V5 +10 CWE-1021
TI-2023-02123 CVE-2023-2264 · GHSA-9vh5-qcwf-6gp4

Improper input validition could lead to code injection

Priority LOW 33

An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate authorized users to click on a link that could allow undesired behavior.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2023-11-30 Fixed in R118-V4, R119-V5 +10 CWE-20