SSA-162255

csafDEsiemens_psirt

SSA-162255: Multiple Vulnerabilities in Polarion Before V2410

view advisory published 2025-05-13

Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities, but also to benefit from all the other improvements and fixes. For Polarion V2404 patch releases can be applied.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-51447US——
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an obse…
CVE-2024-51446USmedium5.4—
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file upload feature of the affected application improperly saniti…
CVE-2024-51445US——
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XX…
CVE-2024-51444US——
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan