CVE-2025-23363 — Open Redirect in Siemens Teamcenter V14.1

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 49.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Siemens Teamcenter V14.1Siemens Teamcenter V14.2Siemens Teamcenter V14.3+4 more
Timeline
PublishedFeb 11

Description

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All versions < V2312.0010), Teamcenter V2406 (All versions < V2406.0008), Teamcenter V2412 (All versions < V2412.0004). The SSO login service of affected applications accepts user-controlled input that could specify a link to an external site. This could allow an attacker to redirect the legitimate user to an attacker-chosen URL …

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N

Affected Packages7 packages

▶CVEListV5siemens/teamcenter_v2312< V2312.0010
▶CVEListV5siemens/teamcenter_v2406< V2406.0008
▶CVEListV5siemens/teamcenter_v2412< V2412.0004
▶NVDsiemens/teamcenter14.3 — 14.3.0.14+5

🔴Vulnerability Details

2
GHSA
GHSA-8gh5-x56f-9qh9: A vulnerability has been identified in Teamcenter (All versions < V14↗2025-02-11
▶
CVEList
CVE-2025-23363: A vulnerability has been identified in Teamcenter V14↗2025-02-11
▶
CVE-2025-23363 — Open Redirect in Siemens | cvebase