Known vulnerabilities in User Management Component (UMC)

Vendor: Siemens
Software: User Management Component (UMC)
Software CPE: cpe:2.3:a:siemens:user_management_component_umc:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting User Management Component (UMC) User Management Component (UMC) is affected by 12 known vulnerabilities: 4 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115181 - Out-of-bounds read
CVE-2025-40798		 CWE-125 Medium
No
No
 2.15.1.3 12.09.2025 SB2025091225
#VU115178 - Out-of-bounds read
CVE-2025-40797		 CWE-125 Medium
No
No
 2.15.1.3 12.09.2025 SB2025091225
#VU115170 - Out-of-bounds read
CVE-2025-40796		 CWE-125 Medium
No
No
 2.15.1.3 12.09.2025 SB2025091225
#VU115169 - Stack-based buffer overflow
CVE-2025-40795		 CWE-121 High
No
No
 2.15.1.3 12.09.2025 SB2025091225
#VU109419 - Out-of-bounds read
CVE-2025-30176		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109418 - Out-of-bounds write
CVE-2025-30175		 CWE-787 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109417 - Out-of-bounds read
CVE-2025-30174		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU84382 - Improper input validation
CVE-2023-46285		 CWE-20 Medium
No
No
 2.11.2 13.12.2023 SB2023121329
#VU84378 - Memory corruption
CVE-2023-46284		 CWE-119 Medium
No
No
 2.11.2 13.12.2023 SB2023121329
#VU84375 - Memory corruption
CVE-2023-46283		 CWE-119 Medium
No
No
 2.11.2 13.12.2023 SB2023121329
#VU84371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46282		 CWE-79 Low
No
No
 2.11.2 13.12.2023 SB2023121329
#VU84369 - Overly Permissive Cross-domain Whitelist
CVE-2023-46281		 CWE-942 Medium
No
No
 2.11.2 13.12.2023 SB2023121329