Siemens Polarion Subversion Webclient
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15789US | high8.1 | — | ||
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting use… | ||||
| CVE-2020-15788US | medium6.1 | — | ||
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross… | ||||
references
External citations — patches, advisories, analysis.
- SSA-436520: XSS and CSRF Vulnerabilities in Polarion Subversion Webclient - HTML Versionself
- ICS Advisory ICSA-20-252-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-252-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationPolarion Subversion Webclient
Do not open unknown links while working on Polarion Subversion webclient
- MitigationPolarion Subversion Webclient
Do not open unknown links while working on Polarion Subversion webclient
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan