cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2021-41547,https://securityvulnerability.io/vulnerability/CVE-2021-41547,,"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.11), Teamcenter Active Workspace V5.0 (All versions < V5.0.10), Teamcenter Active Workspace V5.1 (All versions < V5.1.6), Teamcenter Active Workspace V5.2 (All versions < V5.2.3). The application contains an unsafe unzipping pattern that could lead to a zip path traversal attack. This could allow and attacker to execute a remote shell with admin rights.",Siemens,"Teamcenter Active Workspace V4.3,Teamcenter Active Workspace V5.0,Teamcenter Active Workspace V5.1,Teamcenter Active Workspace V5.2",7.2,HIGH,0.001820000004954636,false,,false,false,false,,false,false,2021-12-14T12:06:36.000Z,0 CVE-2021-40357,https://securityvulnerability.io/vulnerability/CVE-2021-40357,,"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.",Siemens,"Teamcenter Active Workspace V4.3,Teamcenter Active Workspace V5.0,Teamcenter Active Workspace V5.1,Teamcenter Active Workspace V5.2",4.9,MEDIUM,0.000859999970998615,false,,false,false,false,,false,false,2021-09-14T10:48:01.000Z,0 CVE-2021-33711,https://securityvulnerability.io/vulnerability/CVE-2021-33711,,"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). The affected application allows verbose error messages which allow leaking of sensitive information, such as full paths.",Siemens,"Teamcenter Active Workspace V4,Teamcenter Active Workspace V5.0,Teamcenter Active Workspace V5.1",5.3,MEDIUM,0.0008399999933317304,false,,false,false,false,,false,false,2021-07-13T11:03:02.000Z,0 CVE-2021-33710,https://securityvulnerability.io/vulnerability/CVE-2021-33710,,"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected devices that could allow an attacker to execute malicious JavaScript code by tricking users into accessing a malicious link.",Siemens,"Teamcenter Active Workspace V4,Teamcenter Active Workspace V5.0,Teamcenter Active Workspace V5.1",6.1,MEDIUM,0.0007800000021234155,false,,false,false,false,,false,false,2021-07-13T11:03:01.000Z,0 CVE-2021-33709,https://securityvulnerability.io/vulnerability/CVE-2021-33709,,"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.",Siemens,"Teamcenter Active Workspace V4,Teamcenter Active Workspace V5.0,Teamcenter Active Workspace V5.1",4.3,MEDIUM,0.0008200000156648457,false,,false,false,false,,false,false,2021-07-13T11:03:00.000Z,0