cve.bz

CVE-2023-40732

3.9 lowEPSS 0.2%

Low (3.9) in siemens qms automotive. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks.

Severity

CVSS 3.1

3.9 low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE
CWE-613
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON