Filtered by vendor Siemens Subscriptions
Filtered by product Soa Audit Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-41980 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 3.1 Low
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive information.
CVE-2024-41984 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 2.6 Low
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application improperly handles error while accessing an inaccessible resource leading to exposing the system applications.
CVE-2024-41983 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 3.5 Low
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application displays SQL statement in the error messages encountered during the generation of reports using Cockpit tool.
CVE-2024-41986 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 6.4 Medium
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application support insecure TLS 1.0 and 1.1 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data.
CVE-2024-41979 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 7.1 High
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not enforce mandatory authorization on some functionality level at server side. This could allow an authenticated attacker to gain complete access of the application.
CVE-2024-41982 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 4.8 Medium
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not have adequate encryption of sensitive information. This could allow an authenticated attacker to gain access of sensitive information.
CVE-2024-41985 1 Siemens 3 Smartclient Modules, Soa Audit, Soa Cockpit 2025-08-12 2.6 Low
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.