Skip to contentSchneider Electric Data Center Expert vulnerabilities
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...CVE-2026-192338.6 High
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')...CVE-2026-80448.6 High
- schneider electric ecostruxure™ it data center expert, schneider-electric struxureware data center expert +1 moreCWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2026-80457.1 High
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information...CVE-2025-139577.5 High
- schneider electric ecostruxure™ it data center expertCWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation...CVE-2025-501247.2 High
- schneider electric ecostruxure™ it data center expertCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated...CVE-2025-501256.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could...CVE-2025-501237.2 High
- schneider electric ecostruxure™ it data center expertCWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when...CVE-2025-501228.9 High
- schneider electric ecostruxure™ it data center expertCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'...CVE-2025-50121EPSS 22.1%9.5 Critical
- schneider electric ecostruxure™ it data center expertCWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...CVE-2025-64385.9 Medium
- schneider electric data center expertCWE-306: Missing Authentication for Critical Function vulnerability exists that could
cause...CVE-2024-85305.9 Medium
- schneider electric data center expertCWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could...CVE-2024-85317.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-371996.8 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-371986.8 Medium
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
(...CVE-2023-371978.8 High
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL...CVE-2023-371968.8 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...CVE-2023-255555.6 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255536.1 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255516.1 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255507.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255497.2 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command...CVE-2023-255547.8 High
- schneider electric struxureware data center expertA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized...CVE-2023-255528.1 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device...CVE-2023-255488.8 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution...CVE-2023-255478.8 High
- schneider electric data center expertA CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...CVE-2022-325217.1 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...CVE-2022-325208.0 High
- schneider electric data center expertA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in...CVE-2022-325198.0 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...CVE-2022-325188.0 High
- schneider electric struxureware data center expertA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...CVE-2021-227959.1 Critical
- schneider electric struxureware data center expertA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2021-227949.1 Critical