Back to Database
Status published
Low
CVE-2019-13935
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Vulnerability Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a reflected XSS vulnerability. This issue affects: Siemens AG Polarion All versions < 19.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13935
Credits & Attribution
No credits recorded in the NVD database.
More from Siemens AG
View All →CVE-2020-7593
A vulnerability has been identified in LOGO! 8 BM (incl....
Critical
9.8
CVE-2020-7592
A vulnerability has been identified in SIMATIC HMI Basic Panels...
Medium
6.5
CVE-2020-7584
A vulnerability has been identified in SIMATIC S7-200 SMART CPU...
High
7.5
CVE-2020-7583
A vulnerability has been identified in Automation License Manager 5...
High
7.8
CVE-2020-7579
A vulnerability has been identified in Spectrum Power™ 5 (All...
Medium
6.1
Affected Vendor
Siemens AG
View all reports →Affected Software
Polarion
Vulnerable Versions:
All versions < 19.2
Timeline
Official Publish:
November 27th, 2019
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N