Lucene search
SiemensCVELIST:CVE-2021-33710HistoryJul 13, 2021 - 11:03 a.m.
CVE-2021-33710
2021-07-1311:03:01
CWE-79
siemens
www.cve.org
6
teamcenter
active workspace
cross-site scripting
vulnerability
javascript
web interface
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.
CNA Affected
[
{
"product": "Teamcenter Active Workspace V4",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V4.3.9"
}
]
},
{
"product": "Teamcenter Active Workspace V5.0",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V5.0.7"
}
]
},
{
"product": "Teamcenter Active Workspace V5.1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V5.1.4"
}
]
}
]Related
prion
prion
Cross site scripting
2021-07-13 11:15:00
nvd
nvd
CVE-2021-33710
2021-07-13 11:15:09
cve
cve
CVE-2021-33710
2021-07-13 11:15:09
ics
ics
Siemens Teamcenter Active Workspace
2021-07-13 12:00:00