CVE record · 2 sources
CVE-2026-63351
CVSS 6.1Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering…
- Vendor
- Oracle
- Product
- java
- CVSS
- 6.1
- Exposure class
- OT / ICS
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Siemens SIMATIC S7 PLCs Web Server
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s…
-
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering…
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an…