Siemens Spectrum Power 4 — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Spectrum Power 4, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2019-6579 — CVSS 9.8 (critical): A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2022-26476 — CVSS 8.8 (high): A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS)…
• CVE-2022-23312 — CVSS 6.1 (medium): A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online…
• CVE-2019-10933 — CVSS 6.1 (medium): A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate…
• CVE-2020-15790 — CVSS 5.3 (medium): A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server…
• CVE-2020-15784 — CVSS 5.3 (medium): A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure storage of sensitive information in the…