Lucene search

IcscertCVELIST:CVE-2024-3951

HistoryMay 08, 2024 - 2:38 p.m.

CVE-2024-3951 Cross-site Scripting in PTC Codebeamer

2024-05-0814:38:31

CWE-79

icscert

www.cve.org

ptc codebeamer

cross-site scripting

vulnerability

cve-2024-3951

attack

malicious code

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

PTC Codebeamer is vulnerable to a cross site scripting vulnerability that could allow an attacker to inject and execute malicious code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Codebeamer",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "22.10 SP9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.0.0.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.1.0.0"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-128-01