{"id":"CVE-2021-40356","aliases":["EUVD-2021-27534","GHSA-7xwv-xhf6-x5cr"],"status":"published","title":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter...","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter V13.0 (All versions \u003c V13.0.0.7), Teamcenter V13.1 (All versions \u003c V13.1.0.5), Teamcenter V13.2 (All versions \u003c 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01045,"percentile":0.64614,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2021-09-14T10:48:00Z","modified":"2026-06-17T04:06:47Z","products":[{"vendor":"siemens","product":"teamcenter v12.4"},{"vendor":"siemens","product":"teamcenter v13.0"},{"vendor":"siemens","product":"teamcenter v13.1"},{"vendor":"siemens","product":"teamcenter v13.2"},{"vendor":"siemens","product":"teamcenter_visualization"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40356"},{"url":"https://github.com/advisories/GHSA-7xwv-xhf6-x5cr"}],"sources":{"cve":[{"id":"CVE-2021-40356","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter V13.0 (All versions \u003c V13.0.0.7), Teamcenter V13.1 (All versions \u003c V13.1.0.5), Teamcenter V13.2 (All versions \u003c 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.","status":"published","published":"2021-09-14T10:48:00Z","modified":"2024-08-04T02:44:10.071Z","cwes":["CWE-611"],"updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-27534","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter V13.0 (All versions \u003c V13.0.0.7), Teamcenter V13.1 (All versions \u003c V13.1.0.5), Teamcenter V13.2 (All versions \u003c 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.","status":"published","published":"2021-09-14T10:48:00Z","modified":"2024-08-04T02:44:10Z","updated_at":"2026-11-03T03:24:20.862157Z"}],"ghsa":[{"id":"GHSA-7xwv-xhf6-x5cr","title":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter...","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter V13.0 (All versions \u003c V13.0.0.7), Teamcenter V13.1 (All versions \u003c V13.1.0.5), Teamcenter V13.2 (All versions \u003c 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.","status":"published","published":"2022-05-24T19:14:29Z","modified":"2023-01-30T05:02:12Z","cwes":["CWE-611"],"updated_at":"2026-11-02T14:46:35.225326Z"}],"nvd":[{"id":"CVE-2021-40356","description":"A vulnerability has been identified in Teamcenter V12.4 (All versions \u003c V12.4.0.8), Teamcenter V13.0 (All versions \u003c V13.0.0.7), Teamcenter V13.1 (All versions \u003c V13.1.0.5), Teamcenter V13.2 (All versions \u003c 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.","status":"published","published":"2021-09-14T11:15:26.823Z","modified":"2026-06-17T04:06:47.26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}