ICSA-25-135-11 | Vulnetix

ICSA-25-135-11 PUBLISHED CVSS 5.300000190734863 MEDIUM

Record from circl · Published May 13, 2025

Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities, but also to benefit from all the other improvements and fixes. For Polarion V2404 patch releases can be applied.

Risk scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Vendor	Product	Versions
	Polarion V2310
	Polarion V2404

Timeline

May 13, 2025 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ICSA-25-135-11
vulnetix vdb fixes ICSA-25-135-11

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ICSA-25-135-11/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →