CVE-2023-28828

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2023-04-11 Modified: 2026-10-23 First seen: 2026-10-29 Status: pending_score

Description

A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
siemens polarion_alm < 2304.0

References & Advisories (1)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.59%
Raw Score 0.005900
Percentile 48.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00590
2026-10-28
0.00590

Intelligence Sources

nvd ref →