CVE-2019-16344: ScadaBR

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter.

Affected products

• ScadaBR ScadaBR: version 1.0ce only

Published 2019-10-14. Last modified 2026-06-17.