Siemens Teamcenter
The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-23363US | — | — | ||
A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All version… | ||||
references
External citations — patches, advisories, analysis.
- SSA-656895: Open Redirect Vulnerability in Teamcenter - CSAF Versionself
- SSA-656895: Open Redirect Vulnerability in Teamcenter - HTML Versionself
- ICS Advisory ICSA-25-044-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationTeamcenter V14.1
Do not click on links from untrusted sources
- MitigationTeamcenter V14.2
Do not click on links from untrusted sources
- MitigationTeamcenter V14.3
Do not click on links from untrusted sources
- MitigationTeamcenter V2312
Do not click on links from untrusted sources
- MitigationTeamcenter V2406
Do not click on links from untrusted sources
- MitigationTeamcenter V2412
Do not click on links from untrusted sources
- FixedTeamcenter V14.1
Apply the hot fix as described in Software Field Bulletin PL8837639 ( https://support.sw.siemens.com/en-US/product/282219420/knowledge-base/PL8837639)
- FixedTeamcenter V14.2
Apply the hot fix as described in Software Field Bulletin PL8837639 ( https://support.sw.siemens.com/en-US/product/282219420/knowledge-base/PL8837639)
- FixedTeamcenter V14.3
Update to V14.3.0.14 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2312
Update to V2312.0010 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2406
Update to V2406.0008 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2412
Update to V2412.0004 or later version
https://support.sw.siemens.com/product/282219420/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan