179 matches found
The vulnerability of the Polarion ALM application lifecycle management software lies in the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.
The vulnerability of the Polarion ALM application lifecycle management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
CVE-2025-40587
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
CVE-2025-40587
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
CVE-2025-40587
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
CVE-2025-40587
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
CVE-2025-40587
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
CVE-2025-40587
CVE-2025-40587 affects Polarion V2404 (all versions < V2404.5) and Polarion V2410 (all versions
CVE-2025-40587: Improper Neutralization of Input During Web Page Generation
A vulnerability has been identified in Polarion V2404 All versions V2404.5, Polarion V2410 All versions V2410.2. The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting...
Siemens Polarion 跨站脚本漏洞
Siemens Polarion is a software suite for application lifecycle management developed by the German company Siemens. This software supports end-to-end enterprise-level application development within a unified, modular, and browser-based software environment. Previous versions of Siemens Polarion,...
Siemens Polarion
SUMMARY Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general...
PT-2026-7250
Name of the Vulnerable Software and Affected Versions Polarion versions prior to 2404.5 Polarion versions prior to 2410.2 Description The application allows arbitrary JavaScript code to be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-sit...
EUVD-2019-5203
Malware in sbrugna...
EUVD-2019-5205
Malware in sbrugna...
EUVD-2020-7771
Malware in sbrugna...
EUVD-2020-7772
Malware in sbrugna...
EUVD-2019-5204
Malware in sbrugna...
EUVD-2024-31363
Malicious code in bioql PyPI...
EUVD-2022-49084
Malicious code in bioql PyPI...