CVE-2019-19284

5.4 mediumEPSS 0.5%

Medium (5.4) in siemens xhq. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-12-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:xhq

References

https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf

Check your stack JSON