Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSinec Nms (79b3d6a9-dfb2-58fe-a73a-01cdd8fdba1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25656 vulnerable 2026-06-08 07:53:20.166147 Details available
HIGH (7.8)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)
Published: 2026-02-10T09:58:55.243Z
Updated: 2026-04-14T08:40:44.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25655 vulnerable 2026-06-08 07:53:20.163792 Details available
HIGH (7.8)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)
Published: 2026-02-10T09:58:54.129Z
Updated: 2026-02-10T15:04:34.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25654 vulnerable 2026-06-08 07:53:20.163467 Details available
HIGH (8.8)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization when processing password reset requests. This could allow an authenticated remote attacker to bypass authorization checks, leading to the ability to reset the password of any arbitrary user account.
Published: 2026-04-14T08:40:41.053Z
Updated: 2026-04-14T13:46:23.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24032 vulnerable 2026-06-08 07:51:16.596372 Details available
HIGH (7.3)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)
Published: 2026-04-14T08:40:39.853Z
Updated: 2026-04-14T13:18:01.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40755 vulnerable 2026-06-08 07:25:05.521604 Details available
HIGH (8.8)
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)
Published: 2025-10-14T09:15:13.820Z
Updated: 2025-11-25T14:12:03.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40738 vulnerable 2026-06-08 07:25:05.449436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40737 vulnerable 2026-06-08 07:25:05.441164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40736 vulnerable 2026-06-08 07:25:05.440877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40735 vulnerable 2026-06-08 07:25:05.440519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30176 vulnerable 2026-06-08 07:16:59.202023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30175 vulnerable 2026-06-08 07:16:59.190160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30174 vulnerable 2026-06-08 07:16:59.179106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30033 vulnerable 2026-06-08 07:16:58.988799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49775 vulnerable 2026-06-08 06:50:14.668596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47808 vulnerable 2026-06-08 06:48:13.283264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41941 vulnerable 2026-06-08 06:43:55.706570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41940 vulnerable 2026-06-08 06:43:55.706215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41939 vulnerable 2026-06-08 06:43:55.705800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41938 vulnerable 2026-06-08 06:43:55.705253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36398 vulnerable 2026-06-08 06:39:44.626999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33698 vulnerable 2026-06-08 06:37:32.102381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31978 vulnerable 2026-06-08 06:35:32.530377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23812 vulnerable 2026-06-08 06:29:40.497422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23811 vulnerable 2026-06-08 06:29:40.496920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23810 vulnerable 2026-06-08 06:29:40.494878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0727 vulnerable 2026-06-08 06:22:02.009163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6237 vulnerable 2026-06-08 06:19:46.724379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6129 vulnerable 2026-06-08 06:19:46.284960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5678 vulnerable 2026-06-08 06:19:44.451258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5363 vulnerable 2026-06-08 06:19:43.374985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46285 vulnerable 2026-06-08 06:12:44.599469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46284 vulnerable 2026-06-08 06:12:44.598339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46283 vulnerable 2026-06-08 06:12:44.596967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46282 vulnerable 2026-06-08 06:12:44.595534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46281 vulnerable 2026-06-08 06:12:44.584382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46280 vulnerable 2026-06-08 06:12:44.572681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46219 vulnerable 2026-06-08 06:12:44.425411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46218 vulnerable 2026-06-08 06:12:44.421757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44487 vulnerable 2026-06-08 06:12:41.110605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44315 vulnerable 2026-06-08 06:12:40.099466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30527 vulnerable 2026-06-08 05:43:38.182507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25311 vulnerable 2026-06-08 05:41:45.702428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24282 vulnerable 2026-06-08 05:40:59.787280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24281 vulnerable 2026-06-08 05:40:59.785732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0778 vulnerable 2026-06-08 05:39:11.123572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42550 vulnerable 2026-06-08 05:35:22.324791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40438 vulnerable 2026-06-08 05:35:17.979222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3712 vulnerable 2026-06-08 05:33:53.735519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39275 vulnerable 2026-06-08 05:33:49.332944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37201 vulnerable 2026-06-08 05:32:53.730717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37200 vulnerable 2026-06-08 05:32:53.728213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34798 vulnerable 2026-06-08 05:32:16.975304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33736 vulnerable 2026-06-08 05:32:12.243876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33735 vulnerable 2026-06-08 05:32:12.243565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33734 vulnerable 2026-06-08 05:32:12.243239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33733 vulnerable 2026-06-08 05:32:12.242903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33732 vulnerable 2026-06-08 05:32:12.242586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33731 vulnerable 2026-06-08 05:32:12.242260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33730 vulnerable 2026-06-08 05:32:12.241800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33729 vulnerable 2026-06-08 05:32:12.241329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33728 vulnerable 2026-06-08 05:32:12.240877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33727 vulnerable 2026-06-08 05:32:12.240556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33726 vulnerable 2026-06-08 05:32:12.240237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33725 vulnerable 2026-06-08 05:32:12.239923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33724 vulnerable 2026-06-08 05:32:12.239578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33723 vulnerable 2026-06-08 05:32:12.239096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33722 vulnerable 2026-06-08 05:32:12.235729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33721 vulnerable 2026-06-08 05:32:12.232831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7580 vulnerable 2026-06-08 05:27:13.634354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25237 vulnerable 2026-06-08 05:22:36.603037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6575 vulnerable 2026-06-08 05:14:12.315879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.