CVE-2025-40587

highpriority · track · 0EPSS 0.003 · 22 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.30% (22nd) EPSS

CVSS 7.6 · high

Is it mine?

55 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2). The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedPolarion V2404siemens_psirt
Update to V2404.5 or later version
https://support.sw.siemens.com/product/230235217/
FixedPolarion V2410siemens_psirt
Update to V2410.2 or later version
https://support.sw.siemens.com/product/230235217/
FixedPolarion V2404cisa_csaf_ot
Update to V2404.5 or later version
https://support.sw.siemens.com/product/230235217/
FixedPolarion V2410cisa_csaf_ot
Update to V2410.2 or later version
https://support.sw.siemens.com/product/230235217/

cvss

Technical severity, 0–10. One row per scoring source.

7.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 2.2–7.6

v3.17.6highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:Nsecondary · NCSC-NL NL

v3.17.6highAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.17.6highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:Nsecondary · productcert@siemens.com DEexploitability 2.3 · impact 4.7

v3.17.6highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:Nsecondary · Siemens ProductCERT DE

v3.17.6highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:Nsecondary · CISA US

v4.06.2mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:Nsecondary · ENISA EU

v4.06.2mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.02.2lowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-79USCWE-79USCWE-79USCWE-79USCWE-79US

affected products (55)

Products and version ranges known to be affected.

Siemens Polarion <V2404.5all versionscert_bundDE
Siemens Polarion <V2410.2all versionscert_bundDE
Siemens Polarion< V2404.5cert_bundDE
Siemens Polarion< V2410.2cert_bundDE
Polarion V2404all versionscisa_csaf_otUS
Polarion V2410all versionscisa_csaf_otUS
Siemens Polarion V2404≤ vers:intdot/<2404.5cisa_csaf_otUS
Siemens Polarion V2410≤ vers:intdot/<2410.2cisa_csaf_otUS
Siemens Polarion V24040 → V2404.5enisa_euvdEU
Siemens Polarion V24100 → V2410.2enisa_euvdEU
Siemens AG Polarion ALM≤ 2410.2fstec_bduRU
Siemens AG Polarion ALM≤ 2404.5fstec_bduRU
Siemens Cpu 1518F-4 Pn/Dp Mfp Firmware≤ vers:unknown/*ncsc_nlNL
Siemens Desigo CC family V6≤ vers:unknown/*ncsc_nlNL
Siemens Desigo CC family V7≤ vers:unknown/*ncsc_nlNL
Siemens Desigo CC family V8≤ vers:unknown/*ncsc_nlNL
Siemens Desigo CC family V9≤ vers:unknown/*ncsc_nlNL
Siemens NX≤ vers:unknown/*ncsc_nlNL
Siemens PS/IGES Parasolid Translator Component≤ vers:unknown/*ncsc_nlNL
Siemens Polarion V2404≤ vers:unknown/*ncsc_nlNL

showing 20 of 55

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2026-0051Kwetsbaarheden verholpen in Siemens productenNL2026-02-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Desigo, NX, Polarion, SENTRON, Simcenter, SINEC, SIPORT, Siveillance, Solid Edge,
SSA-035571SSA-035571: Cross Site Scripting Vulnerability in Polarion Before V25062026-02-10csaf · siemens_psirtDE
Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2026-0360Siemens Polarion: Schwachstelle ermöglicht Cross-Site ScriptingDeutsch2026-02-09csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Siemens Polarion ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
ICSA-26-043-02Siemens Polarion2026-02-10icsa · cisa_csaf_otUS
Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2026-02-10modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan