Schneider Electric Citectscada Reports vulnerabilities

4 CVEs affecting Schneider Electric Citectscada Reports, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4036, published 2011-12-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-4034, published 2011-12-02. High severity, CVSS 9.3. EPSS: 13.4% chance of exploitation in the next 30 days. Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier,…
CVE-2011-4035, published 2011-12-02. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to…
CVE-2011-4036, published 2011-12-02. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to read…
CVE-2011-4033, published 2011-12-02. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer overflow in the Steema TeeChart ActiveX control, as used in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier,…