Ptc Thingworx Platform
4 CVEs affecting Ptc Thingworx Platform. Latest disclosed: 2018-12-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20092 | High | 7.5 | 2018-12-17 | PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request. |
CVE-2018-17217 | High | 7.5 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key. |
CVE-2018-17216 | Medium | 6.5 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users. |
CVE-2018-17218 | Medium | 5.4 | 2018-10-01 | An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function. |