Medium SSA-162255 4 CVEs

SSA-162255: Multiple Vulnerabilities in Polarion Before V2410

Published May 13, 2025 · Updated May 13, 2025

Vendor: Siemens Product: Polarion V2310 Product: Polarion V2404

Summary

Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames.

Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities, but also to benefit from all the other improvements and fixes. For Polarion V2404 patch releases can be applied.

Vulnerabilities 4

Medium 6.5

CVE-2024-51444

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The appl…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 6.5

CVE-2024-51445

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affe…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 6.5

CVE-2024-51446

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025
Medium 5.3

CVE-2024-51447

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The logi…

Siemens Polarion V2404 Polarion V2310 ICS / OT

May 13, 2025

Revision history

2025-05-13 #1
Publication Date

References

SSA-162255: Multiple Vulnerabilities in Polarion Before V2410 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-162255.html