Lucene search
HistoryMay 08, 2024 - 3:15 p.m.
CVE-2024-3951
ptc codebeamer
xss
vulnerability
injection
malicious code
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
PTC Codebeamer is vulnerable to a cross site scripting vulnerability that could allow an attacker to inject and execute malicious code.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Codebeamer",
"vendor": "PTC",
"versions": [
{
"lessThanOrEqual": "22.10 SP9",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.0.0.3",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.1.0.0"
}
]
}
]Related
cvelist
cvelist
CVE-2024-3951 Cross-site Scripting in PTC Codebeamer
2024-05-08 14:38:31
nvd
nvd
CVE-2024-3951
2024-05-08 15:15:11
ics
ics
PTC Codebeamer
2024-05-07 12:00:00
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-3951