CVE-2018-17217

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key...

Design/Logic Flaw

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...

CVE-2018-17218

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...

CVE-2018-17216

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...

Cross site scripting

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...

CVE-2018-17216

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...

CVE-2018-17218

PTC ThingWorx Platform versions 6.5–8.2 have a reflected XSS in the SQUEAL search function. A remote attacker can exploit via a specially crafted URL to execute script in a user’s browser. Affected component: SQUEAL search; vulnerability type: cross-site scripting. No remediation details are prov...

CVE-2018-17217

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key...

CVE-2018-17217

PTC ThingWorx Platform versions 6.5 through 8.2 are affected by CVE-2018-17217 due to a hardcoded encryption key. This root cause enables potential exposure of sensitive data, with NVD listing CVSSv3 base score 7.5 (HIGH) and network vector. No remediation or exploit details are provided in the c...

CVE-2018-17216

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users...

CVE-2018-17216

PTC ThingWorx Platform 6.5–8.2 is affected by a password hash exposure vulnerability (credential exposure to privileged users). Connected sources enumerate affected versions as 6.5–7.4, 8.0.x, 8.1.x, and 8.2.x, and also reference related XSS/password-disclosure issues in the same family. The root...

CVE-2018-17218

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function...

community.thingworx.com XSS vulnerability

Open Bug Bounty ID: OBB-286068 Description| Value ---|--- Affected Website:| community.thingworx.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

community.thingworx.com XSS vulnerability

Vulnerable URL: https://community.thingworx.com/community/developers/blog/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.20...