Dashboard / CVE-2026-33862

CVE-2026-33862

HIGH
MEDIUM Priority: 0.02 BB Relevance: 57/100
Published: 2026-05-12 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
S: X
AT: None
VC: High
VI: High
VA: None

Description

A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application does not properly encode or filter user-supplied data. This could allow an attacker to inject malicious code that can be executed by other users when they visit the affected page.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
siemens teamcenter 2312.0 – 2312.0014
siemens teamcenter 2406.0 – 2406.0012
siemens teamcenter 2412.0 – 2412.0009
siemens teamcenter 2506.0 – 2506.0005

References & Advisories (1)

Bug Bounty Relevance

57 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

8.5 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.19%
Raw Score 0.001920
Percentile 8.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00192
2026-10-28
0.00192

Intelligence Sources

nvd ref →

External Links