PT-2022-21117 · Siemens · Teamcenter Active Workspace

Published 2022-06-14 · Updated 2022-06-22 · CVE-2022-32145

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Teamcenter Active Workspace versions prior to 5.2.9 Teamcenter Active Workspace versions prior to 6.0.3

Description A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious code by tricking users into accessing a malicious link.

Recommendations For Teamcenter Active Workspace versions prior to 5.2.9, update to version 5.2.9 or later. For Teamcenter Active Workspace versions prior to 6.0.3, update to version 6.0.3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-32145

Affected Products

Teamcenter Active Workspace

References · 4

• https://osv.dev/vulnerability/CVE-2022-32145 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-401167.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32145 · Security Note
• https://t.me/cibsecurity/44380 · Telegram Post