{"id":"CVE-2017-9960","aliases":["EUVD-2017-18869","GHSA-cm9x-2r77-wf8f"],"status":"published","title":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software...","description":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01058,"percentile":0.64728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-09-25T19:00:00Z","modified":"2026-06-17T01:29:17Z","products":[{"vendor":"schneider electric se","product":"u.motion"},{"vendor":"schneider-electric","product":"u.motion_builder"}],"references":[{"url":"http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99344","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9960"},{"url":"http://www.schneider-electric.com/en/download/document/SEVD-2017-178-01"},{"url":"https://github.com/advisories/GHSA-cm9x-2r77-wf8f"}],"sources":{"cve":[{"id":"CVE-2017-9960","description":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.","status":"published","published":"2017-09-25T19:00:00Z","modified":"2024-09-16T17:32:51.192Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18869","description":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.","status":"published","published":"2017-09-25T19:00:00Z","modified":"2024-09-16T17:32:51Z","updated_at":"2026-11-03T00:55:41.41816Z"}],"ghsa":[{"id":"GHSA-cm9x-2r77-wf8f","title":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software...","description":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.","status":"published","published":"2022-05-17T00:47:38Z","modified":"2025-04-20T03:46:55Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:53.348802Z"}],"nvd":[{"id":"CVE-2017-9960","description":"An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should be available to an unauthenticated user.","status":"published","published":"2017-09-26T01:29:03.977Z","modified":"2026-06-17T01:29:17.373Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:59.716532Z"}]}}