CVE-2024-45385

A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.

• CWE-79

• https://cert-portal.siemens.com/productcert/html/ssa-416411.htmlVendor Advisory

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45374The goTenna Pro ATAK plugin uses a weak password for sharing…6.5
• CVE-2024-4538IDOR vulnerability in Janto Ticketing Software affecting ver…7.5
• CVE-2024-45380Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2024-45382in OpenHarmony v4.1.0 and prior versions allow a local attac…5.5
• CVE-2024-45383A mishandling of IRP requests vulnerability exists in the HD…5
• CVE-2024-45384Padding Oracle vulnerability in Apache Druid extension, drui…5.3
• CVE-2024-45386A vulnerability has been identified in SIMATIC PCS neo V4.0 …8.8
• CVE-2024-45387An SQL injection vulnerability in Traffic Ops in Apache Traf…8.8
• CVE-2024-45388Hoverfly is a lightweight service virtualization/ API simula…7.5
• CVE-2024-45389Pagefind, a fully static search library, initializes its dyn…5.4
• CVE-2024-4539An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2024-45390@blakeembrey/template is a string template library. Prior to…9.8