Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Siemens COMOS V10.3, COMOS V10.4.3 and 2 more products V10.3.3.5.8, V10.4.3.0.47 and 2 more versions Clear all filters
TI-2024-36160 CVE-2024-54005 · GHSA-w23f-22px-mx2g

XML external entity injection in Siemens COMOS V10.3

Priority LOW 26

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions < V10.4.3.0.47), COMO…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00157 Published 2024-12-10 Fixed in V10.3.3.5.8, V10.4.3.0.47 +2 CWE-611
TI-2024-33190 CVE-2024-49704 · GHSA-f34q-hm3j-vf93

XML external entity injection in Siemens COMOS V10.3

Priority LOW 25

A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions < V10.4.3.0.47), COMO…

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00185 Published 2024-12-10 Fixed in V10.3.3.5.8, V10.4.3.0.47 +2 CWE-611