Lucene search

K
cvelistSiemensCVELIST:CVE-2022-29801
HistoryMay 10, 2022 - 9:47 a.m.

CVE-2022-29801

2022-05-1009:47:13
CWE-611
siemens
www.cve.org
3
teamcenter
vulnerability
xml external entity injection

EPSS

0.001

Percentile

45.4%

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.

CNA Affected

[
  {
    "product": "Teamcenter V12.4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V12.4.0.13"
      }
    ]
  },
  {
    "product": "Teamcenter V13.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.0.0.9"
      }
    ]
  }
]

EPSS

0.001

Percentile

45.4%

Related for CVELIST:CVE-2022-29801