CVE-2020-10041 | BDVDB-2026-138798 Detail

SiemensSICAM MMU

Description#

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in different locations of the web application. An attacker might be able to take over a session of a legitimate user.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf

Exploit#

No public exploit known

History#

Version 12020-07-14Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.