What’s Vulnerable › Vulnerabilities

CVE-2017-6866

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-284

Description

A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow an authenticated low-privileged remote user to gain read access to data in the XHQ solution exceeding his configured permission level.

Affected products

• XHQ 4 (All versions before V4.7.1.3), XHQ 5 (All versions before V5.0.0.2): through 4.7.1.2; through 5.0.0.1

References

• http://www.securityfocus.com/bid/99247
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-945660.pdf
• http://www.securityfocus.com/bid/99247
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-945660.pdf

Get alerted when CVE-2017-6866 or the next vulnerability affects your stack