CVE-2020-28390: Siemens Opcenter Execution Core

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.

Affected products

• Siemens Opcenter Execution Core: version 8.2 only; version 8.3 only

Published 2021-01-12. Last modified 2026-06-17.