Skip to contentSchneider Electric Struxureware Data Center Expert vulnerabilities
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...CVE-2026-192338.6 High
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')...CVE-2026-80448.6 High
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information...CVE-2025-139577.5 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that...CVE-2023-371996.8 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-371986.8 Medium
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
(...CVE-2023-371978.8 High
- schneider electric struxureware data center expertA CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL...CVE-2023-371968.8 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...CVE-2023-255555.6 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255536.1 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...CVE-2023-255516.1 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255507.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...CVE-2023-255497.2 High
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command...CVE-2023-255547.8 High
- schneider electric struxureware data center expertA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized...CVE-2023-255528.1 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device...CVE-2023-255488.8 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution...CVE-2023-255478.8 High
- schneider electric struxureware data center expertA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...CVE-2021-227959.1 Critical
- schneider electric struxureware data center expertA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2021-227949.1 Critical