Lucene search
IcscertCVE-2023-4296HistoryAug 29, 2023 - 10:15 p.m.
CVE-2023-4296
2023-08-2922:15:09
CWE-79
icscert
web.nvd.nist.gov
11
cve-2023-4296
ptc codebeamer
code injection
browser security
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
34.2%
If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
Affected configurations
Node
intlandcodebeamerMatch21.09.0-
ORintlandcodebeamerMatch21.09.0sp1
ORintlandcodebeamerMatch21.09.0sp10
ORintlandcodebeamerMatch21.09.0sp11
ORintlandcodebeamerMatch21.09.0sp12
ORintlandcodebeamerMatch21.09.0sp13
ORintlandcodebeamerMatch21.09.0sp2
ORintlandcodebeamerMatch21.09.0sp3
ORintlandcodebeamerMatch21.09.0sp4
ORintlandcodebeamerMatch21.09.0sp5
ORintlandcodebeamerMatch21.09.0sp6
ORintlandcodebeamerMatch21.09.0sp7
ORintlandcodebeamerMatch21.09.0sp8
ORintlandcodebeamerMatch21.09.0sp9
ORintlandcodebeamerMatch22.04.0-
ORintlandcodebeamerMatch22.04.0sp1
ORintlandcodebeamerMatch22.04.0sp2
ORintlandcodebeamerMatch22.04.0sp3
ORintlandcodebeamerMatch22.04.0sp4
ORintlandcodebeamerMatch22.04.0sp5
ORintlandcodebeamerMatch22.10.0-
ORintlandcodebeamerMatch22.10.0sp1
ORintlandcodebeamerMatch22.10.0sp2
ORintlandcodebeamerMatch22.10.0sp3
ORintlandcodebeamerMatch22.10.0sp4
ORintlandcodebeamerMatch22.10.0sp5
ORintlandcodebeamerMatch22.10.0sp6
ORintlandcodebeamerMatch22.10.0sp7
ORintlandcodebeamerMatch22.10.0sp8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:-:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp1:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp10:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp11:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp12:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp13:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp2:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp3:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp4:*:*:*:*:*:* |
| intland | codebeamer | 21.09.0 | cpe:2.3:a:intland:codebeamer:21.09.0:sp5:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Codebeamer",
"vendor": "PTC",
"versions": [
{
"lessThanOrEqual": "v22.10-SP7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "v22.04-SP5",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "v21.09-SP13",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.0"
}
]
}
]Related
ics
ics
PTC Codebeamer
2023-08-29 12:00:00
cvelist
cvelist
CVE-2023-4296 PTC Codebeamer Cross site scripting
2023-08-29 21:42:48
nvd
nvd
CVE-2023-4296
2023-08-29 22:15:09
prion
prion
Code injection
2023-08-29 22:15:00
packetstorm
packetstorm
PTC - Codebeamer Cross Site Scripting
2023-09-18 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
34.2%
Related for CVE-2023-4296