Siemens Industrial Edge Management OS Reflected Cross-Site Scripting Vulnerability

Vulnerability

A reflected cross-site scripting vulnerability has been identified in all versions of Siemens Industrial Edge Management OS (IEM-OS). This vulnerability allows attackers to extract sensitive information by deceiving users into clicking on malicious links.

Impact

Exploitation of this vulnerability could lead to reflected cross-site scripting, allowing attackers to extract sensitive information from users.

Remediation

Currently, no fix is planned for this vulnerability in Industrial Edge Management OS. Users are advised to migrate to Industrial Edge Management Virtual (IEM-V).

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
2.5
exploitability
6.0
remediation
7.9
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.