Known vulnerabilities in Teamcenter

Vendor: Siemens
Software: Teamcenter
Software CPE: cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Teamcenter Teamcenter is affected by 10 known vulnerabilities: 1 high, 6 medium, 3 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-58113		 CWE-79 Low
No
No
 2412.0013, 2506.0010, 2512.2607, 2606.2607 09.09.2026 SB2026090953
#VU103905 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-23363		 CWE-601 Medium
No
No
 14.3.0.0 12.02.2025 SB2025021255
#VU66363 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-34661		 CWE-835 Medium
No
No
 12.4.0.15, 13.0.0.10, 13.1.0.10, 13.2.0.9, 13.3.0.5, 14.0.0.2 10.08.2022 SB2022081038
#VU66361 - Command injection
CVE-2022-34660		 CWE-77 Low
No
No
 12.4.0.15, 13.0.0.10, 13.1.0.10, 13.2.0.9, 13.3.0.5, 14.0.0.2 10.08.2022 SB2022081038
#VU64389 - Use of Hard-coded Credentials
CVE-2022-31619		 CWE-798 Medium
No
No
 12.4.0.13, 13.0.0.9, 13.1.0.9, 13.3.0.3 15.06.2022 SB2022061514
#VU63050 - Stack-based buffer overflow
CVE-2022-24290		 CWE-121 High
No
No
 12.4.0.13, 13.0.0.9, 13.2.0.8, 13.3.0.3 11.05.2022 SB2022051123
#VU63046 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-29801		 CWE-611 Medium
No
No
 12.4.0.13, 13.0.0.9 11.05.2022 SB2022051123
#VU56677 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-40356		 CWE-611 Medium
No
No
 12.4.0.8, 13.0.0.7, 13.1.0.5, 13.2.0.2 17.09.2021 SB2021091705
#VU56676 - Authorization Bypass Through User-Controlled Key
CVE-2021-40355		 CWE-639 Low
No
No
 12.4.0.8, 13.0.0.7, 13.1.0.5, 13.2.0.2 17.09.2021 SB2021091705
#VU56675 - Permissions, Privileges, and Access Controls
CVE-2021-40354		 CWE-264 Medium
No
No
 12.4.0.8, 13.0.0.7, 13.1.0.5, 13.2.0.2 17.09.2021 SB2021091705