CVE-2020-15788

A vulnerability has been identified in Polarion Subversion Webclient All versions. The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client e.g. by clickin...

CVE-2020-15788

The CVE-2020-15788 issue affects Polarion Subversion Webclient (all versions) and is a Cross-Site Scripting vulnerability caused by insufficient input filtering in the web application. Exploitation could allow an attacker to deliver JavaScript that executes in a user’s browser, potentially enabli...

Siemens Polarion Subversion Webclient Cross-Site Scripting Vulnerability

Polarion WebClient for SVN is one of several free Subversion tools provided by Polarion Software, it is an SVN client that enables Subversion users to work with SVN repositories using a web browser. A cross-site scripting vulnerability exists in Siemens Polarion Subversion Webclient. An attacker...

Siemens Polarion Subversion Webclient Cross-Site Request Forgery Vulnerability

Polarion WebClient for SVN is one of several free Subversion tools provided by Polarion Software, it is an SVN client that enables Subversion users to work with SVN repositories using a web browser. A cross-site request forgery vulnerability exists in Siemens Polarion Subversion Webclient. An...

CVE-2020-15789: Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in Polarion Subversion Webclient All versions. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who...

PT-2020-14634

Name of the Vulnerable Software and Affected Versions Polarion Subversion Webclient All versions Description A Cross-Site Request Forgery CSRF attack is possible through the web interface if a user is tricked into accessing a malicious link. The attack requires user interaction by an authenticate...

PT-2020-14633

Name of the Vulnerable Software and Affected Versions Polarion Subversion Webclient All versions Description A security issue has been identified where the Polarion subversion web application fails to properly filter user input, allowing for Cross-Site Scripting attacks. If a user is tricked into...

CVE-2020-15788: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in Polarion Subversion Webclient All versions. The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client e.g. by clickin...

Siemens Polarion Subversion Webclient

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Polarion Subversion Webclient Vulnerabilities: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS, Cross-site Request Forgery CSRF 2. RISK EVALUATION...

Warning — Two Unpatched Critical 0-Day RCE Flaws Affect All Windows Versions

Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers remotely take complete control over targeted computers. According to Microsoft, both unpatched flaws are being used in limited, targeted...

Siemens Solid Edge WebPartHelper ActiveX Remote Code Execution

Siemens Solid Edge ST4 and ST5 contain a flaw in the OpenInEditor method in the WPHelper.dll ActiveX control. This issue may allow a context-dependent attacker to potentially execute arbitrary commands. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Vulnerability: the...

Alcatel-Lucent Omnivista 8770 - Remote Code Execution

Alcatel-Lucent Omnivista 8770 - Remote Code Execution Exploit Title: Alcatel-Lucent Omnivista 8770 - Remote Code Execution Google Dork: inurl:php-bin/webclient.php Date: 2019-12-01 Author: 0x1911 Vendor Homepage: https://www.al-enterprise.com/ Software Link:...

Siemens Polarion webclient Cross-Site Scripting Vulnerability

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

Siemens Polarion webclient cross-site scripting vulnerability (CNVD-2019-44255)

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

Siemens Polarion webclient cross-site scripting vulnerability (CNVD-2019-44254)

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

CVE-2019-13935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a reflected XSS vulnerability. This issue affects: Siemens AG Polarion All versions 19.2...

CVE-2019-13935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a reflected XSS vulnerability. This issue affects: Siemens AG Polarion All versions 19.2...

CVE-2019-13936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a persistent XSS vulnerability. This issue affects: Siemens AG Polarion All versions 19.2...

CVE-2019-13934

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a reflected XSS vulnerability. This issue affects: Siemens AG Polarion All versions 19.2...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a persistent XSS vulnerability. This issue affects: Siemens AG Polarion All versions 19.2...