Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Siemens Component: Teamcenter Clear all filters
TI-2026-26251 CVE-2026-33893 · GHSA-6wgq-3rp2-w647

Hard-coded credentials in Siemens Teamcenter V2312

Priority MEDIUM 43

A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00287 Published 2026-05-12 Fixed in V2312.0014, V2406.0012 +2 CWE-798
TI-2026-26225 CVE-2026-33862 · GHSA-4pjx-495c-f5cg

Cross-site scripting in Siemens Teamcenter V2312

Priority LOW 38

A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005…

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00192 Published 2026-05-12 Fixed in V2312.0014, V2406.0012 +2 CWE-79
TI-2025-17138 CVE-2025-23363 · GHSA-8gh5-x56f-9qh9

Open redirect in Siemens Teamcenter V14.1

Priority LOW 30

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All versions < V2312.0010), Teamcenter V2406 (All v…

CVSS 4.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00565 Published 2025-02-11 Fixed in V14.3.0.14, V2312.0010 +2 CWE-601
TI-2022-15480 CVE-2022-34661 · GHSA-ww5r-x8xx-g992

Infinite loop in Siemens Teamcenter V12.4

Priority LOW 34

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00758 Published 2022-08-10 Fixed in V12.4.0.15, V13.0.0.10 +4 CWE-835
TI-2022-15479 CVE-2022-34660 · GHSA-99fp-fmrp-pwj6

Command injection in Siemens Teamcenter V12.4

Priority MEDIUM 51

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9)…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01206 Published 2022-08-10 Fixed in V12.4.0.15, V13.0.0.10 +4 CWE-77
TI-2022-13543 CVE-2022-31619 · GHSA-fc5j-w57x-fv6j

Hard-coded credentials in Siemens Teamcenter V12.4

Priority MEDIUM 41

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9),…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01406 Published 2022-06-14 Fixed in V12.4.0.13, V13.0.0.9 +4 CWE-798
TI-2022-12164 CVE-2022-29801 · GHSA-h2jw-98ww-486c

XML external entity injection in Siemens Teamcenter V12.4

Priority LOW 35

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01033 Published 2022-05-10 Fixed in V12.4.0.13, V13.0.0.9 CWE-611
TI-2022-08171 CVE-2022-24290 · GHSA-5cpx-m8gp-jj7j

Stack-based buffer overflow in Siemens Teamcenter V12.4

Priority LOW 35

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2 (All versions < V13.2.0.8), Teamcenter V…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01268 Published 2022-05-10 Fixed in V12.4.0.13, V13.0.0.9 +3 CWE-121
TI-2021-19919 CVE-2021-44228 · GHSA-jfh8-c2jp-5v3q

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20