CVE-2026-33862
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application does not properly encode or filter user-supplied data. This could allow an attacker to inject malicious code that can be executed by other users when they visit the affected page.
Severity
HIGH
CVSS score
8.5
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-12 10:16:45.773000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-33862",
"sourceIdentifier": "[email protected]",
"published": "2026-05-12T10:16:45.773",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application does not properly encode or filter user-supplied data. This could allow an attacker to inject malicious code that can be executed by other users when they visit the affected page."
},
{
"lang": "es",
"value": "Una vulnerabilidad ha sido identificada en Teamcenter V2312 (Todas las versiones anteriores a V2312.0014), Teamcenter V2406 (Todas las versiones anteriores a V2406.0012), Teamcenter V2412 (Todas las versiones anteriores a V2412.0009), Teamcenter V2506 (Todas las versiones anteriores a V2506.0005), Teamcenter V2512 (Todas las versiones). La aplicación afectada no codifica o filtra adecuadamente los datos proporcionados por el usuario. Esto podría permitir a un atacante inyectar código malicioso que puede ser ejecutado por otros usuarios cuando visitan la página afectada."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "Teamcenter V2312",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "V2312.0014",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter V2406",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "V2406.0012",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter V2412",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "V2412.0009",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter V2506",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "V2506.0005",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Teamcenter V2512",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"lessThan": "*",
"versionType": "custom",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-13T01:41:31.594862Z",
"id": "CVE-2026-33862",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2312.0",
"versionEndExcluding": "2312.0014",
"matchCriteriaId": "502FFA43-E0FC-4415-A54B-880F2FA8B9B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2406.0",
"versionEndExcluding": "2406.0012",
"matchCriteriaId": "FD39BCD3-7659-4CF7-945A-2379CB6EB292"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2412.0",
"versionEndExcluding": "2412.0009",
"matchCriteriaId": "E9F592AE-C478-4EAE-B6E0-9DF1BA6B3CC9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2506.0",
"versionEndExcluding": "2506.0005",
"matchCriteriaId": "85FAC831-1B4B-4554-8FDC-970E37682EE9"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-827383.html",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}