Vulnetix
Try Vulnetix Request Demo
CVE-2021-40356 PUBLISHED CVSS 7.5 HIGH

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.

EPSS 0.31% · 53.7th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.31%
53.7th percentile

Affected Products

VendorProductVersions
SiemensTeamcenter V13.1All versions < V13.1.0.5
SiemensTeamcenter V12.4All versions < V12.4.0.8
siemensteamcenter_visualization13.2.0, 13.0.0, 13.1.0
SiemensTeamcenter V13.0All versions < V13.0.0.7
SiemensTeamcenter V13.2All versions < 13.2.0.2

Timeline

References

…and 2 more

Open in Interactive Console →