SSA-162255: Multiple Vulnerabilities in Polarion Before V2410
Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities, but also to benefit from all the other improvements and fixes. For Polarion V2404 patch releases can be applied.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-51447US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an obse… | ||||
| CVE-2024-51446US | medium5.4 | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file upload feature of the affected application improperly saniti… | ||||
| CVE-2024-51445US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XX… | ||||
| CVE-2024-51444US | — | — | ||
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- Kein Fix geplantPolarion V2310
Currently no fix is planned
- Kein Fix geplantPolarion V2310
Currently no fix is planned
- Kein Fix geplantPolarion V2310
Currently no fix is planned
- Kein Fix geplantPolarion V2310
Currently no fix is planned
- BehobenPolarion V2404
Update to V2404.2 or later version
https://support.sw.siemens.com/product/230235217/ - BehobenPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/ - BehobenPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/ - BehobenPolarion V2404
Update to V2404.4 or later version
https://support.sw.siemens.com/product/230235217/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan