Vulnerabilities (CVE)

Filtered by vendor Ptc Subscribe
Filtered by product Thingworx Platform
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-20092 1 Ptc 1 Thingworx Platform 2023-12-10 5.0 MEDIUM 7.5 HIGH
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
CVE-2018-17218 1 Ptc 1 Thingworx Platform 2023-12-10 3.5 LOW 5.4 MEDIUM
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
CVE-2018-17217 1 Ptc 1 Thingworx Platform 2023-12-10 5.0 MEDIUM 7.5 HIGH
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
CVE-2018-17216 1 Ptc 1 Thingworx Platform 2023-12-10 4.0 MEDIUM 6.5 MEDIUM
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.