CVE-2020-15781

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30). The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser, these log messages might be interpreted and executed as code by the web application. This Cross-Site-Scripting (XSS) vulnerability might compromize the confidentiality, integrity and availability of the web application.

• CWE-79
• CWE-79

• https://cert-portal.siemens.com/productcert/pdf/ssa-370042.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-370042.pdfMitigation, Patch, Vendor Advisory

Published

Aug 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15776An issue was discovered in Gradle Enterprise 2018.2 - 2020.2…8.8
• CVE-2020-15777An issue was discovered in the Maven Extension plugin before…7.8
• CVE-2020-15778scp in OpenSSH through 8.3p1 allows command injection in the…7.4
• CVE-2020-15779A Path Traversal issue was discovered in the socket.io-file …7.5
• CVE-2020-1578An information disclosure vulnerability exists in the Window…4.7
• CVE-2020-15780An issue was discovered in drivers/acpi/acpi_configfs.c in t…6.7
• CVE-2020-15782A vulnerability has been identified in SIMATIC Drive Control…9.8
• CVE-2020-15783A vulnerability has been identified in SIMATIC S7-300 CPU fa…7.5
• CVE-2020-15784A vulnerability has been identified in Spectrum Power 4 (All…5.3
• CVE-2020-15785A vulnerability has been identified in Siveillance Video Cli…5.3
• CVE-2020-15786A vulnerability has been identified in SIMATIC HMI Basic Pan…9.8
• CVE-2020-15787A vulnerability has been identified in SIMATIC HMI Unified C…9.8