Ptc vulnerabilities, page 2
44 vulnerabilities
Known vulnerabilities in Ptc products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 30 products.
CVE-2024-6098geigs+3
EPSS score0.40%
When performing an online tag generation to devices which communicate
using the ControlLogix protocol, a machine-in-the-middle, or a device
that is not configured correctly, could deliver a response leading to
unrestricted or unregulated resource allocation. This could cause a
denial-of-service condition and crash the Kepware application. By
default, these functions are turned off, yet they remain accessible for
users who recognize and require their advantages.CVE-2024-6071ptccreo elements/direct licenseEPSS score1.12%
PTC Creo Elements/Direct License Server exposes a web interface which can be used by unauthenticated remote attackers to execute arbitrary OS commands on the server.CVE-2024-3951ptccodebeamerEPSS score0.35%
PTC Codebeamer is vulnerable to a cross site scripting vulnerability that could allow an attacker to inject and execute malicious code.CVE-2026-77646ptcflexplm+1EPSS score0.44%
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.CVE-2026-77645ptcflexplm+1EPSS score0.56%
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.CVE-2026-77644ptcwindchill risk and reliability enterprise edition (formerly relex)EPSS score0.43%
A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition.CVE-2026-4681ptcflexplm+1EPSS score0.79%
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0.CVE-2026-12569ptcflexplm+1KEVRansomwareEPSS score46.05%
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions
* The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030CVE-2023-0755gedigital_industrial_gateway_server+14EPSS score11.78%
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.CVE-2023-0754gedigital_industrial_gateway_server+14EPSS score2.94%
The affected products are vulnerable to an integer
overflow or wraparound, which could allow an attacker to crash the server and remotely
execute arbitrary code.CVE-2023-31200ptcvuforia_studioEPSS score0.24%
PTC Vuforia Studio does not require a token; this could allow an
attacker with local access to perform a cross-site request forgery
attack or a replay attack.CVE-2023-4296intlandcodebeamer+1EPSS score0.76%
If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.CVE-2023-29447ptckepware_kepserverex+2EPSS score0.36%
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.CVE-2023-29168ptcvuforia_studioEPSS score0.47%
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.CVE-2023-29445ptckepware_kepserverex+2EPSS score0.24%
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.CVE-2023-29502ptcvuforia_studioEPSS score0.50%
Before importing a project into Vuforia, a user could modify the
“resourceDirectory” attribute in the appConfig.json file to be a
different path.CVE-2023-29444ptckepware_kepserverex+2EPSS score0.20%
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.CVE-2023-29152ptcvuforia_studioEPSS score0.45%
By changing the filename parameter in the request, an attacker could
delete any file with the permissions of the Vuforia server account.CVE-2023-29446ptckepware_kepserverex+2EPSS score0.24%
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.CVE-2023-27881ptcvuforia_studioEPSS score0.66%
A user could use the “Upload Resource” functionality to upload files to any location on the disk.