CVE-2020-7915

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 22, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-79166.5be_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itselfCVE-2020-79185.4An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folderCVE-2020-79197.5Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attackCVE-2020-79207.5pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.CVE-2020-79215.3Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valiCVE-2020-79226.5X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improCVE-2020-79236.5A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant iCVE-2020-79246.5Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB CVE-2020-79257.5Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to uCVE-2020-79266.5A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant iCVE-2020-79276.5Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role priCVE-2020-79286.5A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. T
CVE-2020-7915: Medium severity, CVSS 4.8 | Vulnix