Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43407 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:25:25.222Z Vendors: Jenkins project Products: Jenkins Pipeline: Input Step Plugin Description: Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the 'input' step, which is used for the URLs that process user interactions for the given 'input' step (proceed or abort) and is not correctly encoded, allowing attackers able to configure Pipelines to have Jenkins build URLs from 'input' step IDs that would bypass the CSRF protection of any target URL in Jenkins when the 'input' step is interacted with. Additional Anal
would bypass the CSRF protection of any target URL in Jenkins when the 'input' step is interacted with. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2880 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43408 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:24:47.323Z Vendors: Jenkins project Products: Jenkins Pipeline: Stage View Plugin Description: Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828 - http://www
: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43409 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:24:04.903Z Vendors: Jenkins project Products: Jenkins Pipeline: Supporting APIs Plugin Description: Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Pipelines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2881 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43410 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:22:33.351Z Vendors: Jenkins project Products: Jenkins Mercurial Plugin Description: Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2831 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43411 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:21:35.072Z Vendors: Jenkins project Products: Jenkins GitLab Plugin Description: Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2877 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43412 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:18:09.268Z Vendors: Jenkins project Products: Jenkins Generic Webhook Trigger Plugin Description: Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2874 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43413 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:17:17.738Z Vendors: Jenkins project Products: Jenkins Job Import Plugin Description: Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2791 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43414 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:15:09.692Z Vendors: Jenkins project Products: Jenkins NUnit Plugin Description: Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a user-specified directory as test results, allowing attackers able to control agent processes to obtain test results from files in an attacker-specified directory on the Jenkins controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2551 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43415 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T13:44:54.619Z Vendors: Jenkins project Products: Jenkins REPO Plugin Description: Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2337 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43416 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:13:46.114Z Vendors: Jenkins project Products: Jenkins Katalon Plugin Description: Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable arguments, allowing attackers able to control agent processes to invoke Katalon on the Jenkins controller with attacker-controlled version, install location, and arguments, and attackers additionally able to create files on the Jenkins controller (e.g., attackers with Item/Configure permission could archive artifacts) to invoke arbitrary OS
n the Jenkins controller (e.g., attackers with Item/Configure permission could archive artifacts) to invoke arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2844 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43417 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:11:35.892Z Vendors: Jenkins project Products: Jenkins Katalon Plugin Description: Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20%281%29 - http://www.openwall.com/lists/oss-secu
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20%281%29 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43418 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:09:53.057Z Vendors: Jenkins project Products: Jenkins Katalon Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20%282%29 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43419 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:08:51.833Z Vendors: Jenkins project Products: Jenkins Katalon Plugin Description: Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2846 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43420 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:37:02.563Z Vendors: Jenkins project Products: Jenkins Contrast Continuous Application Security Plugin Description: Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2836 - http://www.openwall.co
Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2836 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43421 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:35:08.438Z Vendors: Jenkins project Products: Jenkins Tuleap Git Branch Source Plugin Description: A missing permission check in Jenkins Tuleap Git Branch Source Plugin 3.2.4 and earlier allows unauthenticated attackers to trigger Tuleap projects whose configured repository matches the attacker-specified value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2852 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43422 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:27:52.772Z Vendors: Jenkins project Products: Jenkins Compuware Topaz Utilities Plugin Description: Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2620 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43423 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:26:26.436Z Vendors: Jenkins project Products: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin Description: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-
Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2622 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43424 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T20:43:52.024Z Vendors: Jenkins project Products: Jenkins Compuware Xpediter Code Coverage Plugin Description: Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2627 - http://www.openwall.com/lists/oss-security/2
ces: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2627 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43425 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:07:32.786Z Vendors: Jenkins project Products: Jenkins Custom Checkbox Parameter Plugin Description: Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2797 - http://www.openwall.com/lists/oss-security/2022
: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2797 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43426 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:06:41.416Z Vendors: Jenkins project Products: Jenkins S3 Explorer Plugin Description: Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2480 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43427 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:05:30.277Z Vendors: Jenkins project Products: Jenkins Compuware Topaz for Total Test Plugin Description: Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2623 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43428 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:01:35.549Z Vendors: Jenkins project Products: Jenkins Compuware Topaz for Total Test Plugin Description: Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624 - http://www.openwall.com/lists/oss-security/2022/
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43429 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T19:00:14.372Z Vendors: Jenkins project Products: Jenkins Compuware Topaz for Total Test Plugin Description: Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2624 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43430 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:24:49.701Z Vendors: Jenkins project Products: Jenkins Compuware Topaz for Total Test Plugin Description: Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2625 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43431 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:23:09.008Z Vendors: Jenkins project Products: Jenkins Compuware Strobe Measurement Plugin Description: Jenkins Compuware Strobe Measurement Plugin 1.0.1 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2631 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43432 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:21:57.015Z Vendors: Jenkins project Products: Jenkins XFramium Builder Plugin Description: Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2863 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43433 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:19:43.766Z Vendors: Jenkins project Products: Jenkins ScreenRecorder Plugin Description: Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2864 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43434 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:18:39.595Z Vendors: Jenkins project Products: Jenkins NeuVector Vulnerability Scanner Plugin Description: Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2865 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43435 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-08T18:17:08.858Z Vendors: Jenkins project Products: Jenkins 360 FireLine Plugin Description: Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2866 - http://www.openwall.com/lists/oss-security/2022/10/19/3
CVE ID: CVE-2022-43436 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:47:43.259Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HWA JIUH DIGITAL TECHNOLOGY LTD. Products: EasyTest Problem Types: CWE-434 Description: The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6828-1e5e4-1.html
CVE ID: CVE-2022-43437 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T16:46:55.622Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HWA JIUH DIGITAL TECHNOLOGY LTD. Products: EasyTest Problem Types: CWE-89 Description: The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6829-11133-1.html
CVE ID: CVE-2022-43438 State: PUBLISHED Published: 2023-01-03T00:00:00.000Z Last Updated: 2025-04-10T17:51:34.688Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HWA JIUH DIGITAL TECHNOLOGY LTD. Products: EasyTest Problem Types: CWE-863 Description: The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6830-28746-
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6830-28746-1.html
CVE ID: CVE-2022-43439 State: PUBLISHED Published: 2022-11-08T00:00:00 Last Updated: 2024-08-03T13:32:59.174Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: POWER METER SICAM Q100, SICAM P850, SICAM P855 Problem Types: CWE-20 Description: A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions
(All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855