{"id":"CVE-2021-33709","aliases":["EUVD-2021-20386","GHSA-9m56-wv5v-cxgw"],"status":"published","title":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9),...","description":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.7), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00897,"percentile":0.5989,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2021-07-13T11:03:00Z","modified":"2026-06-17T03:55:05Z","products":[{"vendor":"siemens","product":"teamcenter active workspace v4"},{"vendor":"siemens","product":"teamcenter active workspace v5.0"},{"vendor":"siemens","product":"teamcenter active workspace v5.1"},{"vendor":"siemens","product":"teamcenter_active_workspace"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33709"},{"url":"https://github.com/advisories/GHSA-9m56-wv5v-cxgw"}],"sources":{"cve":[{"id":"CVE-2021-33709","description":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.7), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.","status":"published","published":"2021-07-13T11:03:00Z","modified":"2024-08-03T23:58:22.839Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-20386","description":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.7), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.","status":"published","published":"2021-07-13T11:03:00Z","modified":"2024-08-03T23:58:22Z","updated_at":"2026-11-03T03:24:33.866739Z"}],"ghsa":[{"id":"GHSA-9m56-wv5v-cxgw","title":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9),...","description":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.7), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.","status":"published","published":"2022-05-24T19:07:43Z","modified":"2023-01-30T05:00:41Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:46:15.397604Z"}],"nvd":[{"id":"CVE-2021-33709","description":"A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions \u003c V4.3.9), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.7), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.","status":"published","published":"2021-07-13T11:15:09.75Z","modified":"2026-06-17T03:55:05.017Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:55.747384Z"}]}}