Cross-Site Scripting Vulnerability in XHQ by Siemens
CVE-2019-19288

6.1MEDIUM

Key Information:

Vendor

Siemens
Status
Xhq
Vendor
CVE Published:
14 December 2020

What is CVE-2019-19288?

A vulnerability exists in the XHQ software, specifically in its web interface, which may facilitate Cross-Site Scripting (XSS) attacks. This can occur when users are deceived into clicking on malicious links that exploit the web application's input handling. If executed, these attacks can compromise user sessions, redirect users to harmful sites, or manipulate the content displayed to users.

Affected Version(s)

XHQ All Versions < 6.1

References

https://cert-portal.siemens.com/productcert/pdf/ssa-71269...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.