description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in different locations of the web application. An attacker might be able to take over a session of a legitimate user.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: SICAM MMU
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.05
}
{
product: SICAM SGU
vendor: Siemens AG
versions:
status: affected, version: All versions
}
{
product: SICAM T
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.18
}
