This advisory contains mitigations for Cross-site Scripting, Incomplete List of Disallowed Inputs, Plaintext Storage of a Password, and Buffer Over-read vulnerabilities in ICONICS Product Suite and Mitsubishi Electric MC Works64 HMI SCADA products.
https://us-cert.cisa.gov/ics/advisories/icsa-22-020-01