{"id":"CVE-2021-40357","aliases":["EUVD-2021-27535","GHSA-mpq8-w9f5-qm6g"],"status":"published","title":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10),...","description":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.8), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.5), Teamcenter Active Workspace V5.2 (All versions \u003c V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01167,"percentile":0.67794,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2021-09-14T10:48:01Z","modified":"2026-06-17T04:06:47Z","products":[{"vendor":"siemens","product":"teamcenter active workspace v4.3"},{"vendor":"siemens","product":"teamcenter active workspace v5.0"},{"vendor":"siemens","product":"teamcenter active workspace v5.1"},{"vendor":"siemens","product":"teamcenter active workspace v5.2"},{"vendor":"siemens","product":"teamcenter_active_workspace"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40357"},{"url":"https://github.com/advisories/GHSA-mpq8-w9f5-qm6g"}],"sources":{"cve":[{"id":"CVE-2021-40357","description":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.8), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.5), Teamcenter Active Workspace V5.2 (All versions \u003c V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.","status":"published","published":"2021-09-14T10:48:01Z","modified":"2024-08-04T02:44:09.599Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-27535","description":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.8), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.5), Teamcenter Active Workspace V5.2 (All versions \u003c V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.","status":"published","published":"2021-09-14T10:48:01Z","modified":"2024-08-04T02:44:09Z","updated_at":"2026-11-03T03:24:20.862157Z"}],"ghsa":[{"id":"GHSA-mpq8-w9f5-qm6g","title":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10),...","description":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.8), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.5), Teamcenter Active Workspace V5.2 (All versions \u003c V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.","status":"published","published":"2022-05-24T19:14:29Z","modified":"2023-01-30T05:02:12Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:46:35.225326Z"}],"nvd":[{"id":"CVE-2021-40357","description":"A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions \u003c V4.3.10), Teamcenter Active Workspace V5.0 (All versions \u003c V5.0.8), Teamcenter Active Workspace V5.1 (All versions \u003c V5.1.5), Teamcenter Active Workspace V5.2 (All versions \u003c V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.","status":"published","published":"2021-09-14T11:15:26.903Z","modified":"2026-06-17T04:06:47.37Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}