CVE-2022-29801 - AskarLabs CVE Database

CVE-2022-29801

Vendor Siemens

Product Teamcenter V12.4

Weakness CWE-611 · XXE

Published May 10, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.

Key dates

02Disclosure timeline

May 10, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29801 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Identifiers

CVE CVE-2022-29801

CWE CWE-611

Affected versions

Vendor Siemens

Product Teamcenter V12.4

Affected All versions < V12.4.0.13

Vendor Siemens

Product Teamcenter V13.0

Affected All versions < V13.0.0.9