CVE:CVE-2019-13931
CNNVD:CNNVD-201912-418
Siemens XHQ Operations Intelligence V6.0.0.2之前版本中存在跨站脚本漏洞。攻击者可利用该漏洞窃取用户基于Cookie的身份验证凭证。
solution:Upgrade siemens xhq to a higher version than 6.0.0.2,and avoid the version (,6.0.0.2)