Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
History

Mon, 21 Apr 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2022-08-10T11:18:45.000Z

Updated: 2025-04-21T13:50:56.289Z

Reserved: 2022-07-20T00:00:00.000Z

Link: CVE-2022-36325

cve-icon Vulnrichment

Updated: 2024-08-03T10:00:04.293Z

cve-icon NVD

Status : Modified

Published: 2022-08-10T12:15:12.997

Modified: 2024-11-21T07:12:47.637

Link: CVE-2022-36325

cve-icon Redhat

No data.