Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2018-20092

PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Ptc
Products
Thingworx Platform
CVE-2018-17218

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Ptc
Products
Thingworx Platform
CVE-2018-17217

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ptc
Products
Thingworx Platform
CVE-2018-17216

An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Ptc
Products
Thingworx Platform