https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:24:35.141711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-518 certfr-2021-avi-518 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-09T20:24:35.145389+00:00 certfr-2021-avi-518 https://cve.radiocsirt.org/vuln/euvd-2026-28553 EUVD-2026-28553 2026-10-09T20:24:35.145425+00:00 EUVD-2026-28553 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33710 fkie_cve-2021-33710 2026-10-09T20:24:35.145440+00:00

A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.

 https://cve.radiocsirt.org/vuln/ghsa-rrwx-3wc4-g6pq GHSA-rrwx-3wc4-g6pq 2026-10-09T20:24:35.145470+00:00

A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.

 https://cve.radiocsirt.org/vuln/gsd-2021-33710 gsd-2021-33710 2026-10-09T20:24:35.145487+00:00 gsd-2021-33710 https://cve.radiocsirt.org/vuln/icsa-21-194-11 ICSA-21-194-11 — Siemens Teamcenter Active Workspace 2026-10-09T20:24:35.145497+00:00

By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system. A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link. The affected application allows verbose error messages which allow leaking of sensitive information, such as full paths.