← CVE Intelligence

CVE-2022-23312

Siemens / Spectrum Power 4 PUBLISHED

Description (CNA)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.

Affected (CNA)

Vendor / productVersions
Siemens / Spectrum Power 4affected All versions < V4.70 SP9 Security Patch 1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.