PT-2021-20286 · Siemens · Teamcenter Active Workspace

Published 2021-07-13 · Updated 2021-07-20 · CVE-2021-33710

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Teamcenter Active Workspace versions prior to 4.3.9 Teamcenter Active Workspace V5.0 versions prior to 5.0.7 Teamcenter Active Workspace V5.1 versions prior to 5.1.4

Description: A reflected cross-site scripting (XSS) issue exists in the web interface, allowing an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.

Recommendations: For Teamcenter Active Workspace versions prior to 4.3.9, update to version 4.3.9 or later. For Teamcenter Active Workspace V5.0 versions prior to 5.0.7, update to version 5.0.7 or later. For Teamcenter Active Workspace V5.1 versions prior to 5.1.4, update to version 5.1.4 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-33710

Affected Products

Teamcenter Active Workspace

References · 3

• https://osv.dev/vulnerability/CVE-2021-33710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33710 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf · Vendor Advisory