CVE-2022-23312 | BDVDB-2026-169685 Detail

SiemensSpectrum Power 4

Description#

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://cert-portal.siemens.com/productcert/pdf/ssa-831168.pdf

Exploit#

No public exploit known

History#

Version 12022-02-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.