Vulnerability Details CVE-2020-15792
A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.0%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
Products affected by CVE-2020-15792
-
cpe:2.3:a:siemens:desigo_insight:4.0
-
cpe:2.3:a:siemens:desigo_insight:5.0
-
cpe:2.3:a:siemens:desigo_insight:6.0