13 matches found
CVE-2018-20092
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request...
PT-2018-15253
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions prior to 8.3.1 Description The issue allows for a directory traversal attack on ZIP files via a POST request. This can potentially lead to unauthorized access to sensitive files and directories. Recommendations...
CVE-2018-20092: Improper Limitation of a Pathname to a Restricted Directory
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request...
Cross site scripting
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
CVE-2018-17218
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...
CVE-2018-17218
PTC ThingWorx Platform versions 6.5–8.2 have a reflected XSS in the SQUEAL search function. A remote attacker can exploit via a specially crafted URL to execute script in a user’s browser. Affected component: SQUEAL search; vulnerability type: cross-site scripting. No remediation details are prov...
CVE-2018-17217
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key...
PT-2018-13951
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered that exposes password hashes to privileged users. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, update to a version that contains a fix...
PT-2018-13953
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered in the SQUEAL search function, where there is reflected XSS. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, update to a version that...
PT-2018-13952
Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered in the PTC ThingWorx Platform. There is a hardcoded encryption key. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, consider updating to a...
CVE-2018-17216: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...
CVE-2018-17218: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...