CVE-2019-19287

6.5 mediumEPSS 1.3%

Medium (6.5) in siemens xhq. EPSS 1.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-23
Published: 2020-12-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:xhq

References

https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf

Check your stack JSON