CVE-2022-23312

2022-02-0915:17:30

CWE-79

siemens

www.cve.org

0.001 Low

EPSS

Percentile

31.3%

JSON

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application “Online Help” in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.

CNA Affected

[
  {
    "product": "Spectrum Power 4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.70 SP9 Security Patch 1"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-831168.pdf

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for CVELIST:CVE-2022-23312