SSA-157465: Reflected Cross-site scripting Vulnerability in Teamcenter
A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim's Teamcenter session. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-58113DE | medium6.1 | — | ||
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Tea… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- BehobenTeamcenter V2412
Update to V2412.0013 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2506
Update to V2506.0010 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2512
Update to V2512.2607 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2606
Update to V2606.2607 or later version
https://support.sw.siemens.com/product/282219420/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan