← Back

Thingworx Platform

thingworx_platform

Vendor: Ptc • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ptc
1Thingworx Platform
Nov 21, 2024
Dec 17, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
1Ptc
1Thingworx Platform
Nov 21, 2024
Oct 1, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
1Ptc
1Thingworx Platform
Nov 21, 2024
Oct 1, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
1Ptc
1Thingworx Platform
Nov 21, 2024
Oct 1, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.