High SSA-035571 1 CVE

SSA-035571: Cross Site Scripting Vulnerability in Polarion Before V2506

Published Feb 10, 2026 · Updated Feb 10, 2026

Vendor: Siemens Product: Polarion V2404 Product: Polarion V2410

Summary

Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

High 7.6

CVE-2025-40587

A vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 (All versions < V2410.2)…

Siemens Polarion V2404 Polarion V2410 ICS / OT

Feb 10, 2026

Revision history

2026-02-10 #1
Publication Date

References

SSA-035571: Cross Site Scripting Vulnerability in Polarion Before V2506 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-035571.html