CVE-2020-15788
CVE-2020-15788
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.7%KEV nãoPoC —Patch —
Ciclo de vida
09 set 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.
Produtos afetados
Siemens AG · Polarion Subversion WebclientQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →