PTC

Records44All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

PTC records in CISA KEV

TI-2026-10780 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CRITICAL 99KEV 2026-06-25

Components

Products in the NVD configurations · select one to filter the records

Thingworx Industrial Connectivity 13 records MEDIUM Thingworx Kepware Server 11 records MEDIUM Kepware Kepserverex 9 records MEDIUM Axeda Agent 7 records MEDIUM Axeda Desktop Server 7 records MEDIUM Opc-aggregator 7 records MEDIUM Thingworx Kepware Edge 6 records MEDIUM Vuforia Studio 6 records MEDIUM

Records

7 records in Axeda Agent · all components

TI-2022-08956 CVE-2022-25247 · GHSA-h47g-g6mj-gh39

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

MEDIUM 56

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04144 Published 2022-03-16 No fix listed CWE-306

TI-2022-08960 CVE-2022-25251 · GHSA-v435-3jg8-vq2r

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

MEDIUM 53

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01871 Published 2022-03-16 No fix listed CWE-306

TI-2022-08955 CVE-2022-25246 · GHSA-r24p-mxfv-r3vm

PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

MEDIUM 52

Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01807 Published 2022-03-16 No fix listed CWE-798

TI-2022-08958 CVE-2022-25249 · GHSA-w838-rvv4-m6hv

PTC Axeda agent and Axeda Desktop Server Path Traversal

MEDIUM 44

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02473 Published 2022-03-16 No fix listed CWE-22

TI-2022-08961 CVE-2022-25252 · GHSA-9r2j-qhj5-5qr7

PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions

MEDIUM 42

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01568 Published 2022-03-16 No fix listed CWE-703

TI-2022-08959 CVE-2022-25250 · GHSA-gfgh-qxj6-4755

PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

MEDIUM 42

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01655 Published 2022-03-16 No fix listed CWE-306

TI-2022-08957 CVE-2022-25248 · GHSA-cgvq-3phw-4744

PTC Axeda agent and Axeda Desktop Server Information Exposure

LOW 32

When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00906 Published 2022-03-16 No fix listed CWE-200

Open these records in search →