Siemens AG Polarion Subversion Webclient vulnerabilities
2 vulnerabilities
Known vulnerabilities in Siemens AG Polarion Subversion Webclient, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2020-15789siemens ag · polarion subversion webclientsiemens ag polarion subversion webclientA vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.EPSS0.49%MediumCVE-2020-15788siemens ag · polarion subversion webclientsiemens ag polarion subversion webclientA vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.EPSS0.67%