Known vulnerabilities in Polarion ALM

Vendor: Siemens
Software: Polarion ALM
Software CPE: cpe:2.3:a:siemens:polarion_alm:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Polarion ALM Polarion ALM is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89638 - Improper Access Control
CVE-2024-33647		 CWE-284 Medium
No
No
 2404.0 17.05.2024 SB2024051723
#VU86545 - Improper Authentication
CVE-2024-23813		 CWE-287 Medium
No
No
 - 15.02.2024 SB2024021534
#VU86544 - Incorrect Default Permissions
CVE-2023-50236		 CWE-276 Low
No
No
 - 15.02.2024 SB2024021534
#VU75033 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-28828		 CWE-611 Medium
No
No
 2304.0 12.04.2023 SB2023041237
#VU70382 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2022-46265		 CWE-74 Medium
No
No
 - 15.12.2022 SB2022121534