Siemens Polarion ALM
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-33647 | < V2404.0 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected applicati | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-23813 | < V2404.0 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected produ | CRITICAL 9.8 | 0.6 % | ||
| CVE-2023-50236 | < V2404.0 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder | HIGH 7.8 | 0.1 % | ||
| CVE-2023-28828 | All versions < V22R2 | A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) v | HIGH 7.5 | 0.6 % | ||
| CVE-2022-46265 | All versions < V2304.0 | A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host header injection vuln | MEDIUM 6.1 | 0.4 % | ||
| CVE-2021-44478 | All versions < V21 R2 P2 | A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scri | MEDIUM 6.1 | 0.8 % |