CVE-2022-29876 HIGH

CVE-2022-29876

Vendor Siemens

Product SICAM T

Weakness CWE-79 · XSS

Published May 10, 2022

Last update December 9, 2025

View on NVD All CVEs

CVSS base score

7.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.

Key dates

02Disclosure timeline

May 10, 2022 CVE published

December 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29876 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-69317 WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47062 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2022-1029 Limit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting CVE-2025-7901 yangzongzhuan RuoYi Swagger UI index.html cross site scripting CVE-2023-51461 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)