Security Advisory

CVE-2023-31160

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-10 19:23:43
Last updated 2025-01-24 19:19:25
Assigner SEL
State PUBLISHED

Description

An Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL Service Bulletin dated 2022-11-15 for more details.