CVE-2021-40355 PUBLISHED CVSS 8.800000190734863 HIGH

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The affected application contains Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to use user-supplied input to access objects directly.

EPSS 0.39% · 60.1th percentile

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.39%
60.1th percentile

Affected Products

VendorProductVersions
SiemensTeamcenter V12.4All versions < V12.4.0.8
SiemensTeamcenter V13.2All versions < 13.2.0.2
siemensteamcenter_visualization13.2.0, 13.0.0, 13.1.0
SiemensTeamcenter V13.0All versions < V13.0.0.7
SiemensTeamcenter V13.1All versions < V13.1.0.5

Timeline

References

…and 2 more

Open in Interactive Console →