Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-11450

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software TEAMCENTER V9.1.3 and newer are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens AG Siemens PLM Software TEAMCENTER

  • Siemens PLM Software TEAMCENTER : Version 9.1.2.5affected

References