CVE-2023-28828
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2023-04-11
Modified: 2026-10-23
First seen: 2026-10-29
Status: pending_score
Description
A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| siemens | polarion_alm | < 2304.0 |
References & Advisories (1)
Mitigation
Vendor Advisory