CVE-2016-6204

published 2016-07-22

CVE-2016-6204: Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
siemens	sinema_remote_connect_server	<= 1.1	—

CWE-79