[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-41907":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":25,"references":27,"score":29,"epss_score":30,"epss_percentile":31,"is_kev":32,"cisa_kev_date_added":33,"cisa_kev_due_date":33,"cisa_ssvc":34,"attack_mappings":44,"exploits":51},40023,"CVE-2024-41907","EUVD-2024-39265","A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions \u003C V2.0). The affected application is missing general HTTP security headers in the web server. This could allow an attacker to make the servers more prone to clickjacking attack.","2024-08-13T08:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":19,"confidentialityImpact":17},"UNCHANGED","3.1",5.4,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"NVD-CWE-Other",[24],"cpe:2.3:a:siemens:sinec_traffic_analyzer:*:*:*:*:*:*:*:*",[26],"Siemens Sinec Traffic Analyzer",[28],"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-716317.html",0.47,0.00225,0.12453,false,null,{"timestamp":35,"automatable":36,"tech_impact":37,"exploitation":38,"cisa_decision":39,"cisa_remediation_timeline":43},"2024-08-13T17:50:47.405333Z","no","partial","none",{"vector":40,"decision":41,"priority":42},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T13:38:11.342886\u002F","track_star","medium","60D",[45],{"name":46,"source":47,"tactics":48,"technique_id":50},"Exploit Public-Facing Application","attack_vector",[49],"initial-access","T1190",[]]