{"id":"CVE-2019-19294","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-19294","generatedAt":"2026-10-27T21:18:41.051Z","title":"A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).","description":"A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains\nmultiple stored Cross-site Scripting (XSS) vulnerabilities in several input\nfields.\nThis could allow an authenticated remote attacker to inject malicious\nJavaScript code into the CCS web application that is later executed\nin the browser context of any other user who views the relevant CCS\nweb content.","published":"2020-03-10T20:15:19.000Z","lastModified":"2026-06-17T02:26:27.000Z","status":"Modified","sourceIdentifier":"productcert@siemens.com","cvss":{"version":"3.1","score":6.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N"},"cwe":["CWE-79"],"affected":["siemens/sinvr 3 central control server","siemens/sinvr 3 video server"],"epss":{"score":0.0101,"percentile":0.62871,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf","source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf","tags":["Vendor Advisory"],"source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-19294","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}