Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-13931

Опубликовано: 12 дек. 2019
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires for an attacker to be authenticated to the web interface. A successful attack could cause the application to have unexpected behavior. This could allow the attacker to modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:xhq:*:*:*:*:*:*:*:*
Версия до 6.0.0.2 (исключая)

EPSS

Процентиль: 60%
0.00403
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-80
CWE-79

Связанные уязвимости

github
больше 3 лет назад

A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires for an attacker to be authenticated to the web interface. A successful attack could cause the application to have unexpected behavior. This could allow the attacker to modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.

EPSS

Процентиль: 60%
0.00403
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-80
CWE-79