Siemens Sipass Integrated — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Sipass Integrated, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2012-5409 — CVSS 10.0 (critical): AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an…
• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2021-44524 — CVSS 9.8 (critical): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…
• CVE-2017-9939 — CVSS 9.8 (critical): A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to…
• CVE-2022-22965 — CVSS 9.8 (critical) — actively exploited: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The…
• CVE-2021-44523 — CVSS 9.1 (critical): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2017-9940 — CVSS 8.1 (high): A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a…
• CVE-2017-9942 — CVSS 7.8 (high): A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to…
• CVE-2022-31812 — CVSS 7.5 (high): A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds…
• CVE-2021-44522 — CVSS 7.5 (high): A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated…
• CVE-2022-31810 — CVSS 7.5 (high): A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size…
• CVE-2017-9941 — CVSS 7.4 (high): A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle…
• CVE-2025-40772 — CVSS 7.4 (high): A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored…
• CVE-2025-40774 — CVSS 4.4 (medium): A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted…
• CVE-2025-40773 — CVSS 3.5 (low): A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access…