Siemens Polarion ALM

6 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2024-33647< V2404.0A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected applicatiMEDIUM 6.50.4 %
CVE-2024-23813< V2404.0A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected produCRITICAL 9.80.6 %
CVE-2023-50236< V2404.0A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folderHIGH 7.80.1 %
CVE-2023-28828All versions < V22R2A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vHIGH 7.50.6 %
CVE-2022-46265All versions < V2304.0A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host header injection vulnMEDIUM 6.10.4 %
CVE-2021-44478All versions < V21 R2 P2A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scriMEDIUM 6.10.8 %