CVE-2022-29034

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code. This could allow attackers to perform reflected cross-site scripting (XSS) attacks.

• CWE-79
• CWE-79

• http://packetstormsecurity.com/files/167554/SIEMENS-SINEMA-Remote-Connect-3.0.1.0-01.01.00.02-Cross-Site-Scripting.htmlExploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Jun/35Exploit, Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-484086.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdfPatch, Vendor Advisory
• http://packetstormsecurity.com/files/167554/SIEMENS-SINEMA-Remote-Connect-3.0.1.0-01.01.00.02-Cross-Site-Scripting.htmlExploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2022/Jun/35Exploit, Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-484086.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdfPatch, Vendor Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29029A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2022-2903The Ninja Forms Contact Form WordPress plugin before 3.6.13 …7.2
• CVE-2022-29030A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2022-29031A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2022-29032A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2022-29033A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2022-29035In JetBrains Ktor Native before version 2.0.0 random values …2.7
• CVE-2022-29036Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, …5.4
• CVE-2022-29037Jenkins CVS Plugin 2.19 and earlier does not escape the name…5.4
• CVE-2022-29038Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c …5.4
• CVE-2022-29039Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not es…5.4
• CVE-2022-2904A cross-site scripting issue has been discovered in GitLab C…5.4