Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

10 records in Xhq · all components

TI-2019-10387 CVE-2019-13932 · GHSA-3269-hcm6-x235

Improper input validation in Siemens XHQ

Priority MEDIUM 41

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01042 Published 2019-12-12 Fixed in V6.0.0.2 CWE-20
TI-2019-13909 CVE-2019-19289 · GHSA-gfm3-3hp2-f82x

Cross-site request forgery in Siemens XHQ

Priority LOW 38

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00452 Published 2020-12-14 Fixed in 6.1 CWE-352
TI-2019-10385 CVE-2019-13930 · GHSA-mj5f-wfm2-8fw6

Cross-site request forgery in Siemens XHQ

Priority LOW 36

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00465 Published 2019-12-12 Fixed in V6.0.0.2 CWE-352
TI-2019-13906 CVE-2019-19286 · GHSA-3c7w-74wv-vg2f

SQL injection in Siemens XHQ

Priority LOW 33

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00897 Published 2020-12-14 Fixed in 6.1 CWE-89
TI-2019-13907 CVE-2019-19287 · GHSA-m4c5-25qf-rmm3

Path traversal in Siemens XHQ

Priority LOW 31

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01256 Published 2020-12-14 Fixed in 6.1 CWE-23
TI-2019-13908 CVE-2019-19288 · GHSA-vfx7-j9j3-864c

Cross-site scripting in Siemens XHQ

Priority LOW 28

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-12-14 Fixed in 6.1 CWE-79
TI-2019-13903 CVE-2019-19283 · GHSA-69h7-5pmq-j396

Information disclosure in Siemens XHQ

Priority LOW 26

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00862 Published 2020-12-14 Fixed in 6.1 CWE-200
TI-2019-13905 CVE-2019-19285 · GHSA-3wv2-v64p-7q7m

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-12-14 Fixed in 6.1 CWE-80
TI-2019-13904 CVE-2019-19284 · GHSA-qh5q-fpqr-qwj9

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-12-14 Fixed in 6.1 CWE-79
TI-2019-10386 CVE-2019-13931 · GHSA-h7c9-gjhc-27w5

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-12-12 Fixed in V6.0.0.2 CWE-80
Open these records in search →