Known vulnerabilities in SINEMA Server

Known vulnerabilities in SINEMA Server

Vendor: Siemens

Software: SINEMA Server

Software CPE: cpe:2.3:a:siemens:sinema_server:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 8

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU81913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-35796	CWE-79	Low	No	No	-	11.10.2023	SB2023101167
#VU56679 - Memory corruption CVE-2021-39275	CWE-119	Medium	No	No	-	17.09.2021	SB2021091706 SB2021091707 SB2021092301 and 44 more
#VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438	CWE-918	High	Available	Exploited	-	17.09.2021	SB2021091706 SB2021091707 SB2021092301 and 42 more
#VU56665 - Missing Authentication for Critical Function CVE-2019-10941	CWE-306	Medium	No	No	14 SP3	16.09.2021	SB2021091615
#VU50640 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-25237	CWE-22	Medium	No	No	14.0 SP2 Update 2	11.02.2021	SB2021021123
#VU28936 - Unquoted Search Path or Element CVE-2020-7580	CWE-428	Low	No	No	-	10.06.2020	SB2020061031
#VU24310 - Incorrect Privilege Assignment CVE-2019-10940	CWE-266	High	No	No	14.0 SP2 Update 1	15.01.2020	SB2020011503
#VU40141 - Permissions, Privileges, and Access Controls CVE-2016-6486	CWE-264	Low	No	No	-	08.08.2016	SB2016080804