Sinema Server
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sinema_server:14.0:*:*:*:*:*:*:*
part: a version: 14.0 update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sinema Server (6724d105-2acd-5395-af2e-8813405c172e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35796 |
vulnerable | 2026-06-08 06:06:27.770026 |
Details available
HIGH (8.3)
A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with `SYSTEM` privileges on the application server. (ZDI-CAN-19823)
Published: 2023-10-10T10:21:20.721Z
Updated: 2024-09-19T14:28:45.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25311 |
vulnerable | 2026-06-08 05:41:45.704229 |
Details available
HIGH (7.3)
A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.
Published: 2022-03-08T00:00:00.000Z
Updated: 2025-04-21T13:55:26.745Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.