Siemens Spectrum Power found to have Cross Site Scripting Vulnerability

July 11, 2019

Siemens Spectrum Power was found to be prone to cross site scripting vulnerability . This was caused because the user supplied inputs were not properly sanitised. Attackers can easily exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. They can also steam cookie -based authentication credentials . This could also be used to launch other attacks.

CVE-2019-10933

Affected versions :-

Siemens Spectrum Power 7 2.20
Siemens Spectrum Power 5 5.50
Siemens Spectrum Power 4 4.75
Siemens Spectrum Power 3 3.11

siemens spectrum waf

Advanced Machine Learning Based Cloud Security Solution

The Prophaze WAF can be deployed in any Public cloud such as AWS, GCP, Azure, Digital Ocean and on Private Cloud instance like Microk8s

100%

The security of your details is important to us. Prophaze Technologies collects a variety of data that you provide directly to us. The types of data we gather will depend upon the services you use, how you use them, and what you choose to provide. We process your details when necessary to provide you with the services that you have requested when accepting our Terms of Services or when we have the legitimate interest(security, testing, analytics, and so on) to do so please checkout our page.

Demo Request Form

100% Advanced Machine Learning Based Bot Management Solution

Demo Request Form

Siemens Spectrum Power found to have Cross Site Scripting Vulnerability

Getting Started

Use Cases

WAF Automation

Contact Us