Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

9 records in Sinec Network Management System · all components

TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

Code injection in Spring Framework

Priority CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94
TI-2021-15262 CVE-2021-37200 · GHSA-fx3m-586f-fprw

Path traversal in Siemens SINEC NMS

Priority MEDIUM 60

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1).

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.3738 Published 2021-09-14 No fix listed CWE-22
TI-2020-15474 CVE-2020-25237 · GHSA-3xq9-pprq-hm99

Path traversal in Siemens SINEC NMS

Priority MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.20616 Published 2021-02-09 No fix listed CWE-22
TI-2022-09004 CVE-2022-25311 · GHSA-35fm-4q2r-j938

Improper privilege management in Siemens SINEC NMS

Priority MEDIUM 41

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00537 Published 2022-03-08 Fixed in V1.0.3 CWE-269
TI-2022-08164 CVE-2022-24281 · GHSA-wvr5-w97w-7ch7

SQL injection in Siemens SINEC NMS

Priority MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03489 Published 2022-03-08 Fixed in V1.0.3 CWE-89
TI-2021-15263 CVE-2021-37201 · GHSA-hhjr-xgqf-mpfc

Cross-site request forgery in Siemens SINEC NMS

Priority LOW 38

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00429 Published 2021-09-14 No fix listed CWE-352
TI-2022-08165 CVE-2022-24282 · GHSA-h9pr-8j9g-2rhq

Deserialization of untrusted data in Siemens SINEC NMS

Priority LOW 37

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0143 Published 2022-03-08 Fixed in V1.0.3 CWE-502
TI-2021-13095 CVE-2021-33721 · GHSA-63f9-382x-9vr8

OS command injection in Siemens SINEC NMS

Priority LOW 37

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02672 Published 2021-08-10 No fix listed CWE-78
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
Open these records in search →