Sinema Server vulnerabilities

3 known vulnerabilities in Sinema Server from Siemens. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  SINEMA Server V14: Improper Neutralization of Input During Web Page Generation

  CVE-2023-35796Oct 10, 2023Siemens

  A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-

• 8.8 High severity

  SINEC NMS: Improper Privilege Management

  CVE-2022-25311Mar 8, 2022Siemens

  A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, cre

• 9.0 Critical severity

  Apache HTTP Server-Side Request Forgery (SSRF) Exploited

  CVE-2021-40438Sep 16, 2021ApacheEPSS 100%

  A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.