CVE-2020-28210

MEDIUM · CVSS 6.1 EPSS 0.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-28210

Severity

MEDIUM

CVSS

6.1

EPSS

0.80%

Java

Original NVD Description

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser.