CVE-2021-33710
13.07.2021, 11:15
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.
| Vendor | Product | Version |
|---|---|---|
| siemens | teamcenter_active_workspace | 4.0.0 ≤ 𝑥 < 4.3.9 |
| siemens | teamcenter_active_workspace | 5.0.0 ≤ 𝑥 < 5.0.7 |
| siemens | teamcenter_active_workspace | 5.1.0 ≤ 𝑥 < 5.1.4 |
𝑥
= Vulnerable software versions