CVE-2019-13936

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-27 · updated 2026-06-17
Weakness: CWE-79

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siemens AG Polarion could allow an attacker to exploit a persistent XSS vulnerability. This issue affects: Siemens AG Polarion All versions < 19.2.

Affected products

Siemens AG Polarion: before 19.2 — fixed in 19.2

How to fix

Upgrade to a fixed version: Siemens AG Polarion 19.2. Check the vendor advisory for mitigations.

References

https://xavibel.com/2019/11/25/siemens-polarion-multiple-web-vulnerabilities/
https://xavibel.com/2019/11/25/siemens-polarion-multiple-web-vulnerabilities/

Get alerted when CVE-2019-13936 or the next vulnerability affects your stack