CVE-2021-40356

creationtimestamp| type| source ---|---|--- 2021-09-14 14:20:57+00:00| seen| https://t.me/cibsecurity/28777...

CVE-2021-40356

Siemens Teamcenter VM versions affected by CVE-2021-40356 have an XML External Entity Injection (XXE) vulnerability that could allow viewing files on the application server filesystem. Affected: Teamcenter 12.4 (all < 12.4.0.8), 13.0 (< 13.0.0.7), 13.1 (< 13.1.0.5), 13.2 (

Siemens Teamcenter

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Vulnerability: Privilege Defined with Unsafe Actions, Authorization Bypass Through User-Controlled Key, Improper Restriction of XML External Entity Reference 2. RISK...