CVE-2022-32145

2022-06-1409:21:59

CWE-79

siemens

www.cve.org

0.001 Low

EPSS

Percentile

31.3%

JSON

A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versions < V6.0.3). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious code by tricking users into accessing a malicious link.

CNA Affected

[
  {
    "product": "Teamcenter Active Workspace V5.2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.9"
      }
    ]
  },
  {
    "product": "Teamcenter Active Workspace V6.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.0.3"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-401167.pdf

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for CVELIST:CVE-2022-32145