SSA-157465: Reflected Cross-site scripting Vulnerability in Teamcenter
A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim's Teamcenter session. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-58113DE | medium6.1 | — | ||
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Tea… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedTeamcenter V2412
Update to V2412.0013 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2506
Update to V2506.0010 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2512
Update to V2512.2607 or later version
https://support.sw.siemens.com/product/282219420/ - FixedTeamcenter V2606
Update to V2606.2607 or later version
https://support.sw.siemens.com/product/282219420/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan