Veille CVE

Recherche « Siemens user management component »

5 CVE

Critique 2 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Siemens user management component » ✕
  1. CVE-2026-18963 9.1 Critique

    Red Hat build of Keycloak 26.4 · Red Hat build of Keycloak 26.4.15 · Red Hat build of Keycloak 26.6 · Red Hat build of Keycloak 26.6.6

    A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.

  2. CVE-2025-40798 7.5 Élevée

    Siemens SIMATIC PCS neo V4.1 · Siemens SIMATIC PCS neo V5.0 · Siemens SIMATIC PCS neo V6.0 · Siemens User Management Component (UMC)

    A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

  3. CVE-2025-40797 7.5 Élevée

    Siemens SIMATIC PCS neo V4.1 · Siemens SIMATIC PCS neo V5.0 · Siemens SIMATIC PCS neo V6.0 · Siemens User Management Component (UMC)

    A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

  4. CVE-2025-40796 7.5 Élevée

    Siemens SIMATIC PCS neo V4.1 · Siemens SIMATIC PCS neo V5.0 · Siemens SIMATIC PCS neo V6.0 · Siemens User Management Component (UMC)

    A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.

  5. CVE-2025-40795 9.8 Critique

    Siemens SIMATIC PCS neo V4.1 · Siemens SIMATIC PCS neo V5.0 · Siemens SIMATIC PCS neo V6.0 · Siemens User Management Component (UMC)

    A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.