CVE-2023-35796

A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with `SYSTEM` privileges on the application server. (ZDI-CAN-19823)

• CWE-79

• https://cert-portal.siemens.com/productcert/pdf/ssa-594373.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-594373.pdfVendor Advisory

Published

Oct 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3579A vulnerability, which was classified as problematic, has be…8.8
• CVE-2023-35790An issue was discovered in dec_patch_dictionary.cc in libjxl…7.5
• CVE-2023-35791Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerabi…6.1
• CVE-2023-35792Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-…6.1
• CVE-2023-35793An issue was discovered in Cassia Access Controller 2.1.1.23…8.8
• CVE-2023-35794An issue was discovered in Cassia Access Controller 2.1.1.23…8.8
• CVE-2023-35797Improper Input Validation vulnerability in Apache Software F…9.8
• CVE-2023-35798Input Validation vulnerability in Apache Software Foundation…4.3
• CVE-2023-35799Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 …5.5
• CVE-2023-3580Improper Handling of Additional Special Element in GitHub re…4.3
• CVE-2023-35800Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 …4.3
• CVE-2023-35801A directory traversal vulnerability in Safe Software FME Ser…8.1