Product by Siemens

    Comos V10.3

    7 known vulnerabilities in Comos V10.3 (Siemens), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Comos V10.3 (Siemens)
    HighCVE-2021-37197

    Siemens COMOS: SQL Injection

    also in 3 other products

    		8.8
    HighCVE-2021-37194

    Siemens COMOS: Unrestricted Upload of File with Dangerous Type

    also in 3 other products

    		7.5
    MediumCVE-2021-37196

    Siemens COMOS: Relative Path Traversal

    also in 3 other products

    		6.5
    HighCVE-2021-37198

    Siemens COMOS: Cross-Site Request Forgery (CSRF)

    also in 3 other products

    		8.8
    MediumCVE-2021-37195

    Siemens COMOS: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    also in 3 other products

    		6.1
    MediumCVE-2024-54005

    Improper Restriction of XML External Entity Reference (CVE-2024-54005)

    		5.1
    MediumCVE-2024-49704

    Improper Restriction of XML External Entity Reference (CVE-2024-49704)

    		5.5

    All products by Siemens