CVE-2019-19284 - A vulnerability has been identified in XHQ (All Versions < 6.1)

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in XHQ (All Versions < 6.1)

Published Dec 14, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.52%

Description

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.

Affected products

Vendor Siemens Product XHQ Default
unknown
Affected
- All Versions < 6.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Siemens	XHQ	unknown	Affected All Versions < 6.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8908
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8908		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Dec 14, 2020

Updated Aug 5, 2024

Reserved Nov 26, 2019

Link CVE-2019-19284

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19284

Red Hat

No data

ENISA EUVD

Assigner siemens

Published Dec 14, 2020

Updated Aug 5, 2024

Link EUVD-2019-8908

GitHub

No data