Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-58113

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Tea

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Teamcenter V2412

Default version status: unknown

  • 0 to < V2412.0013affected

Siemens Teamcenter V2506

Default version status: unknown

  • 0 to < V2506.0010affected

Siemens Teamcenter V2512

Default version status: unknown

  • 0 to < V2512.2607affected

Siemens Teamcenter V2606

Default version status: unknown

  • 0 to < V2606.2607affected

References