PT-2019-13478 · Xhq · Xhq

Published 2019-12-12 · Updated 2019-12-19 · CVE-2019-13931

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions XHQ versions prior to 6.0.0.2

Description A vulnerability has been identified that could allow an attacker to craft unexpected input in the web interface, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires the attacker to be authenticated to the web interface. This could allow the attacker to modify the contents of the web application. No public exploitation of this security issue was known at the time of advisory publication.

Recommendations For versions prior to 6.0.0.2, update to version 6.0.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2019-13931

Affected Products

Xhq

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-13931 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13931 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf · Vendor Advisory