CVE-2020-15792: Siemens Desigo Insight

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.

Affected products

• Siemens Desigo Insight: before 6.0 (fixed in 6.0); version 6.0 only

Published 2020-10-15. Last modified 2026-06-17.