Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

9 records in Polarion Alm · all components

TI-2024-15807 CVE-2024-23813 · GHSA-f8v6-h8xc-6v8q

Improper authentication in Siemens Polarion ALM

Priority MEDIUM 50

A vulnerability has been identified in Polarion ALM (All versions < V2404.0).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2024-02-13 Fixed in V2404.0 CWE-287
TI-2024-34374 CVE-2024-51445 · GHSA-66q5-cm35-phr2

XML external entity injection in Siemens Polarion V2310

Priority LOW 32

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00548 Published 2025-05-13 Fixed in V2404.4 CWE-611
TI-2024-34373 CVE-2024-51444 · GHSA-fjcf-72jr-936x

SQL injection in Siemens Polarion V2310

Priority LOW 32

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00566 Published 2025-05-13 Fixed in V2404.4 CWE-89
TI-2021-20081 CVE-2021-44478 · GHSA-44g4-c9hw-qp42

Cross-site scripting in Siemens Polarion ALM

Priority LOW 29

A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00761 Published 2022-03-08 No fix listed CWE-79
TI-2022-22830 CVE-2022-46265 · GHSA-h5rx-8hw7-qcfp

Injection in Siemens Polarion ALM

Priority LOW 27

A vulnerability has been identified in Polarion ALM (All versions < V2304.0).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2022-12-13 Fixed in V2304.0 CWE-74
TI-2024-34375 CVE-2024-51446 · GHSA-g96q-8ghc-48j6

Cross-site scripting in Siemens Polarion V2310

Priority LOW 23

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00336 Published 2025-05-13 Fixed in V2404.4 CWE-79
Open these records in search →