Ptc vulnerabilities

Products

• Thingworx Industrial Connectivity 13
• Thingworx Kepware Server 11
• Thingworx Industrial Connectivity 10
• Thingworx Kepware Server 10
• Kepware Kepserverex 9
• Axeda Agent 7
• Axeda Agent 7
• Axeda Desktop Server 7
• Axeda Desktop Server For Windows 7
• Kepware Kepserverex 7
• Opc-aggregator 7
• Thingworx Kepware Edge 6
• Vuforia Studio 6
• Vuforia Studio 6
• Flexplm 4
• Thingworx Kepware Edge 4
• Thingworx Platform 4
• Windchill Pdmlink 4
• Kepserverex 3
• Codebeamer 2
• Ge Digital Industrial Gateway Server 2
• Keepserverex 2
• Kepware Server 2
• Kepware Serverex 2
• Kepware Kepserverex 2
• Rockwell Automation Kepserver Enterprise 2
• Thingworx Edge C-sdk 2
• Thingworx Edge C-sdk 2
• Thingworx Edge Microserver 2
• Thingworx Edge Microserver (ems) 2
• Thingworx .net-sdk 2

Newest

• ptc flexplm, windchill pdmlink +1 more Server Side Request Forgery (SSRF) vulnerability reported in Windchill CVE-2026-77646 7.7 HighAugust 20, 2026
• ptc flexplm, windchill pdmlink +1 more Critical Remote Code Execution (RCE) vulnerability reported in Windchill CVE-2026-77645 9.2 CriticalAugust 20, 2026
• ptc windchill risk and reliability enterprise edition (formerly relex) Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition CVE-2026-77644 9.3 CriticalAugust 20, 2026
• ptc flexplm, windchill and flexplm, windchill pdmlink +2 more Remote Code Execution (RCE) vulnerability in Windchill PDMlink CVE-2026-12569 In KEV EPSS 46.0% 9.3 CriticalJune 18, 2026
• ptc flexplm, windchill pdmlink +1 more Critical Remote Code Execution vulnerability reported in Windchill CVE-2026-4681 9.3 CriticalMarch 23, 2026
• ptc thingworx An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view... CVE-2024-40395 6.5 MediumAugust 27, 2024
• ptc kepware thingworx kepware server, ge igs, ptc kepware kepserverex +1 more +3 more PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling CVE-2024-6098 5.9 MediumAugust 16, 2024
• ptc creo elements/direct license, creo elements\/direct license +1 more PTC Creo Elements/Direct License Server Missing Authorization CVE-2024-6071 10.0 CriticalJune 27, 2024
• ptc codebeamer Cross-site Scripting in PTC Codebeamer CVE-2024-3951 7.1 HighMay 8, 2024
• ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more Insufficiently Protected Credentials in PTC's Kepware KEPServerEX CVE-2023-29447 5.7 MediumJanuary 10, 2024
• ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more Improper Input Validation in PTC's Kepware KEPServerEX CVE-2023-29446 4.7 MediumJanuary 10, 2024
• ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more Uncontrolled Search Path Element in PTC's Kepware KEPServerEX CVE-2023-29445 7.8 HighJanuary 10, 2024
• ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more Uncontrolled Search Path Element in PTC's Kepware KEPServerEX CVE-2023-29444 6.3 MediumJanuary 10, 2024
• kepware kepserverex, ge industrial gateway server, ptc keepserverex +6 more +8 more Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx CVE-2023-5909 7.5 HighNovember 30, 2023
• kepware kepserverex, ge industrial gateway server, ptc keepserverex +6 more +8 more Heap Based Buffer Overflow in PTC KEPServerEx CVE-2023-5908 9.1 CriticalNovember 30, 2023
• intland codebeamer PTC Codebeamer Cross site scripting CVE-2023-4296 8.8 HighAugust 29, 2023
• kepware kepserverex PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively... CVE-2023-3825 7.5 HighJuly 31, 2023
• ptc vuforia studio PTC Vuforia Studio Cross-Site Request Forgery CVE-2023-31200 5.7 MediumJune 7, 2023
• ptc vuforia studio PTC Vuforia Studio Path Traversal CVE-2023-29502 6.2 MediumJune 7, 2023
• ptc vuforia studio PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type CVE-2023-27881 8.0 HighJune 7, 2023
• ptc vuforia studio PTC Vuforia Studio Improper Authorization CVE-2023-29152 6.2 MediumJune 7, 2023
• ptc vuforia studio PTC Vuforia Studio Improper Authorization CVE-2023-24476 1.8 LowJune 7, 2023
• ptc vuforia studio PTC Vuforia Studio Insufficiently Protected Credentials CVE-2023-29168 3.7 LowJune 7, 2023
• kepware kepserverex, ptc kepware kepserverex, ge industrial gateway server +6 more +8 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-2848 9.1 CriticalMarch 29, 2023
• kepware kepserverex, ptc kepware kepserverex, ge industrial gateway server +6 more +8 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-2825 9.8 CriticalMarch 29, 2023
• ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 more The affected products are vulnerable to an integer overflow or wraparound, which could allow an... CVE-2023-0754 9.8 CriticalFebruary 23, 2023
• ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 more The affected products are vulnerable to an improper validation of array index, which could allow... CVE-2023-0755 EPSS 11.8% 9.8 CriticalFebruary 23, 2023
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function CVE-2022-25251 9.8 CriticalMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions CVE-2022-25252 7.5 HighMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function CVE-2022-25250 7.5 HighMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Path Traversal CVE-2022-25249 7.5 HighMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Information Exposure CVE-2022-25248 5.3 MediumMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials CVE-2022-25246 9.8 CriticalMarch 16, 2022
• ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 more PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function CVE-2022-25247 9.8 CriticalMarch 16, 2022
• ge industrial gateway server, ptc opc-aggregator, thingworx industrial connectivity +4 more +6 more KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial... CVE-2020-27265 EPSS 12.5% 9.8 CriticalJanuary 13, 2021
• ge industrial gateway server, ptc ge digital industrial gateway server, opc-aggregator +6 more +8 more KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial... CVE-2020-27263 9.1 CriticalJanuary 13, 2021
• ge industrial gateway server, ptc ge digital industrial gateway server, opc-aggregator +6 more +8 more KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial... CVE-2020-27267 9.1 CriticalJanuary 13, 2021
• ptc thingworx platform PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files... CVE-2018-20092 7.5 HighDecember 17, 2018
• ptc thingworx platform An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the... CVE-2018-17218 5.4 MediumOctober 1, 2018
• ptc thingworx platform An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded... CVE-2018-17217 7.5 HighOctober 1, 2018
• ptc thingworx platform An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash... CVE-2018-17216 6.5 MediumOctober 1, 2018
• ptc creo view Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to... CVE-2015-2061 7.5 HighMarch 9, 2015
• ptc isoview Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute... CVE-2014-9267 6.8 MediumDecember 8, 2014
• ptc mathcad The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14,... CVE-2007-4600 4.6 MediumOctober 18, 2007