CVE-2024-51445 — Siemens / Polarion V2310

CVE-2024-51445

Siemens / Polarion V2310 PUBLISHED

Description (CNA)

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XXE) vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from the application server.

Affected (CNA)

Vendor / product	Versions
Siemens / Polarion V2310	affected 0 before *
Siemens / Polarion V2404	affected 0 before V2404.4

CWE

CWE-611

References

https://cert-portal.siemens.com/productcert/html/ssa-162255.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.