Siemens Polarion
Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities, but also to benefit from all the other improvements and fixes. For Polarion V2404 patch releases can be applied.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-51447US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an obse… | ||||
| CVE-2024-51446US | medium5.4 | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file upload feature of the affected application improperly saniti… | ||||
| CVE-2024-51445US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XX… | ||||
| CVE-2024-51444US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read… | ||||
references
External citations — patches, advisories, analysis.
- SSA-162255: Multiple Vulnerabilities in Polarion Before V2410 - CSAF Versionself
- SSA-162255: Multiple Vulnerabilities in Polarion Before V2410 - HTML Versionself
- ICS Advisory ICSA-25-135-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-135-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- No fix plannedPolarion V2310
Currently no fix is planned
- No fix plannedPolarion V2310
Currently no fix is planned
- No fix plannedPolarion V2310
Currently no fix is planned
- No fix plannedPolarion V2310
Currently no fix is planned
- FixedPolarion V2404
Update to V2404.2 or later version
https://support.sw.siemens.com/product/230235217/ - FixedPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/ - FixedPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/ - FixedPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan