CVE-2022-44575

2022-12-1300:00:00

CWE-79

siemens

www.cve.org

vulnerability

plm help server

xss

execution of malicious javascript code

EPSS

0.001

Percentile

31.5%

JSON

A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link.

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "PLM Help Server V4.2",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf

EPSS

0.001

Percentile

31.5%

JSON

Related for CVELIST:CVE-2022-44575