Siemens Xhq vulnerabilities

10 CVEs affecting Siemens Xhq, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19289, published 2020-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19287, published 2020-12-14. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets…
CVE-2019-13932, published 2019-12-12. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application to behave in unexpected ways for legitimate users.…
CVE-2019-19286, published 2020-12-14. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pages.
CVE-2019-19283, published 2020-12-14. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to…
CVE-2019-19288, published 2020-12-14. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.
CVE-2019-19285, published 2020-12-14. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious…
CVE-2019-19284, published 2020-12-14. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages,…
CVE-2019-13931, published 2019-12-12. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to…
CVE-2019-13930, published 2019-12-12. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a…
CVE-2019-19289, published 2020-12-14. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious…