Siemens Polarion Subversion Webclient vulnerabilities

3 CVEs affecting Siemens Polarion Subversion Webclient, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44478, published 2022-03-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44478, published 2022-03-08. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutralization of data…
CVE-2020-15788, published 2020-09-09. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If…
CVE-2020-15789, published 2020-09-09. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into…