CVE-2018-17216

PTC ThingWorx Platform 6.5–8.2 is affected by a password hash exposure vulnerability (credential exposure to privileged users). Connected sources enumerate affected versions as 6.5–7.4, 8.0.x, 8.1.x, and 8.2.x, and also reference related XSS/password-disclosure issues in the same family. The root...

CVE-2018-20092

CVE-2018-20092 affects PTC ThingWorx Platform up to version 8.3.0. The vulnerability is a directory traversal flaw in ZIP file handling via a POST request. The underlying impact, as stated, is partial confidentiality with no other impacts (integrity/availability not affected) and no user interact...

CVE-2018-17218

PTC ThingWorx Platform versions 6.5–8.2 have a reflected XSS in the SQUEAL search function. A remote attacker can exploit via a specially crafted URL to execute script in a user’s browser. Affected component: SQUEAL search; vulnerability type: cross-site scripting. No remediation details are prov...

CVE-2018-17217

PTC ThingWorx Platform versions 6.5 through 8.2 are affected by CVE-2018-17217 due to a hardcoded encryption key. This root cause enables potential exposure of sensitive data, with NVD listing CVSSv3 base score 7.5 (HIGH) and network vector. No remediation or exploit details are provided in the c...