Advisories · Technology

Siemens Polarion ALM.

Every CVE that names Siemens Polarion ALM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-33647 CVE record

CVSS 6.5 Medium

Improper access control in Siemens Polarion ALM
- Siemens Polarion ALM
- Broken access control
Not analysed yet 14 May 2024
CVE-2024-23813 CVE record

CVSS 7.3 High

Improper authentication in Siemens Polarion ALM
- Siemens Polarion ALM
- Authentication bypass
Not analysed yet 13 Feb 2024
CVE-2023-50236 CVE record

CVSS 7.8 High

Incorrect default permissions in Siemens Polarion ALM
- Siemens Polarion ALM
- Broken access control
Not analysed yet 13 Feb 2024
CVE-2023-28828 CVE record

CVSS 5.9 Medium

XML external entity injection in Siemens Polarion ALM
- Siemens Polarion ALM
- XML external entities (XXE)
Not analysed yet 11 Apr 2023
CVE-2022-46265 CVE record

CVSS 5.4 Medium

Injection in Siemens Polarion ALM
- Siemens Polarion ALM
- Other injection
Not analysed yet 13 Dec 2022
CVE-2021-44478 CVE record

Cross-site scripting in Siemens Polarion ALM and others
- Siemens Polarion ALM
- Siemens Polarion WebClient for SVN
- Cross-site scripting (XSS)
Not analysed yet 8 Mar 2022