Advisories · Technology
Siemens QMS Automotive.
Every CVE that names Siemens QMS Automotive among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.9 Low
Insufficient session expiration in Siemens QMS Automotive
- Siemens QMS Automotive
- Authentication bypass
- CVSS 5.7 Medium
Unrestricted file upload in Siemens QMS Automotive
- Siemens QMS Automotive
- Unrestricted file upload
- CVSS 7.1 High
Improper access control in Siemens QMS Automotive
- Siemens QMS Automotive
- Broken access control
- CVSS 7.3 High
Cleartext transmission of sensitive information in Siemens QMS Automotive
- Siemens QMS Automotive
- Weak cryptography or TLS
- CVSS 7.3 High
Insecure storage of sensitive information in Siemens QMS Automotive
- Siemens QMS Automotive
- Information disclosure
- CVSS 7.8 High
Improper signature verification in Siemens QMS Automotive
- Siemens QMS Automotive
- Weak cryptography or TLS
- CVSS 8.8 High
A vulnerability has been identified in QMS Automotive (All versions < V12.39).
- Siemens QMS Automotive
- CWE-550
- CVSS 4.0 Medium
Sensitive information in error messages in Siemens QMS Automotive
- Siemens QMS Automotive
- Information disclosure
- CVSS 7.3 High
A vulnerability has been identified in QMS Automotive (All versions < V12.39).
- Siemens QMS Automotive
- CWE-316
- CVSS 7.6 High
Plaintext password storage in Siemens QMS Automotive
- Siemens QMS Automotive
- CWE-256
-
Hard-coded cryptographic key in Siemens Opcenter Quality and others
- Siemens Opcenter Quality
- Siemens QMS Automotive
- Hard-coded credentials