Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GE Gas Power WorkstationST 07.09.15 Clear all filters
TI-2022-17672 CVE-2022-37952 · GHSA-pvm3-6x23-6xwp

WorkstationST - Reflected XSS in iHistorian Data Display Tags

Priority LOW 27

A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2022-08-25 Fixed in 07.09.15 CWE-79
TI-2022-17673 CVE-2022-37953 · GHSA-pjgf-vwqm-hxw7

WorkstationST - Response Splitting in AM Gateway Challenge-Response

Priority LOW 27

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2022-08-25 Fixed in 07.09.15 CWE-113