Siemens Sppa-t3000 Application Server vulnerabilities

19 CVEs affecting Siemens Sppa-t3000 Application Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18335, published 2019-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18283, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An…
CVE-2019-18288, published 2019-12-12. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with valid authentication at the RMI interface could be able to gain remote…
CVE-2019-18316, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution…
CVE-2019-18315, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution…
CVE-2018-4832, published 2018-04-24. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7…
CVE-2019-18314, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution…
CVE-2019-18284, published 2019-12-12. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An…
CVE-2019-18287, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive…
CVE-2019-18286, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive…
CVE-2019-18320, published 2019-12-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload…

Latest

CVE-2019-18335, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to gain access to…
CVE-2019-18334, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to enumerate valid…
CVE-2019-18333, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to filenames…
CVE-2019-18332, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to directory…
CVE-2019-18331, published 2019-12-12. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to path and…
CVE-2019-18319, published 2019-12-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service…
CVE-2019-18318, published 2019-12-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server can cause a Denial-of-Service…
CVE-2019-18317, published 2019-12-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service…