Polarion Subversion Webclient
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens_ag:polarion_subversion_webclient:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens Ag (6b4625df-dd28-5c6a-8569-4e99d778ef77) |
|---|---|
| Product | Polarion Subversion Webclient (ff85b29f-0e92-50d4-a7b1-742e6ba3ed1c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15789 |
vulnerable | 2026-06-08 05:19:26.647516 |
Details available
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application.
Published: 2020-09-09T18:11:44.000Z
Updated: 2024-08-04T13:22:30.839Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15788 |
vulnerable | 2026-06-08 05:19:26.646541 |
Details available
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If a user is enticed into passing specially crafted, malicious input to the web client (e.g. by clicking on a malicious URL with embedded JavaScript), then JavaScript code can be returned and may then be executed by the user’s client. Various actions could be triggered by running malicious JavaScript code.
Published: 2020-09-09T18:11:42.000Z
Updated: 2024-08-04T13:22:30.762Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.