Riskcovery

CVE-2020-7576

State
Published
Severity
Not scored
Published
Jul 14, 2020
Updated
Aug 4, 2024
Reserved
Jan 21, 2020

Read the record on cve.org

Description

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

ProductVersions
Camstar Enterprise PlatformSiemens
  • All versionsAffected
Opcenter Execution CoreSiemens
  • All versions < V8.2Affected
Opcenter Execution CoreSiemens
  • V8.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.