Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Siemens Component: Xhq Clear all filters
TI-2019-13909 CVE-2019-19289 · GHSA-gfm3-3hp2-f82x

Cross-site request forgery in Siemens XHQ

Priority LOW 38

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00452 Published 2020-12-14 Fixed in 6.1 CWE-352
TI-2019-13908 CVE-2019-19288 · GHSA-vfx7-j9j3-864c

Cross-site scripting in Siemens XHQ

Priority LOW 28

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-12-14 Fixed in 6.1 CWE-79
TI-2019-13907 CVE-2019-19287 · GHSA-m4c5-25qf-rmm3

Path traversal in Siemens XHQ

Priority LOW 31

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01256 Published 2020-12-14 Fixed in 6.1 CWE-23
TI-2019-13906 CVE-2019-19286 · GHSA-3c7w-74wv-vg2f

SQL injection in Siemens XHQ

Priority LOW 33

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00897 Published 2020-12-14 Fixed in 6.1 CWE-89
TI-2019-13905 CVE-2019-19285 · GHSA-3wv2-v64p-7q7m

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-12-14 Fixed in 6.1 CWE-80
TI-2019-13904 CVE-2019-19284 · GHSA-qh5q-fpqr-qwj9

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-12-14 Fixed in 6.1 CWE-79
TI-2019-13903 CVE-2019-19283 · GHSA-69h7-5pmq-j396

Information disclosure in Siemens XHQ

Priority LOW 26

A vulnerability has been identified in XHQ (All Versions < 6.1).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00862 Published 2020-12-14 Fixed in 6.1 CWE-200
TI-2019-10387 CVE-2019-13932 · GHSA-3269-hcm6-x235

Improper input validation in Siemens XHQ

Priority MEDIUM 41

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01042 Published 2019-12-12 Fixed in V6.0.0.2 CWE-20
TI-2019-10386 CVE-2019-13931 · GHSA-h7c9-gjhc-27w5

Cross-site scripting in Siemens XHQ

Priority LOW 25

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-12-12 Fixed in V6.0.0.2 CWE-80
TI-2019-10385 CVE-2019-13930 · GHSA-mj5f-wfm2-8fw6

Cross-site request forgery in Siemens XHQ

Priority LOW 36

A vulnerability has been identified in XHQ (All versions < V6.0.0.2).

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00465 Published 2019-12-12 Fixed in V6.0.0.2 CWE-352