Skip to content
OpenAdvisories

Product · PTC

Vuforia Studio

6 known vulnerabilities.

Vuforia Studio at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 8.0
    ICSA-23-131-13 6 CVEs

    PTC Vuforia Studio

    Successful exploitation of these vulnerabilities could allow an attacker to view credentials, perform a cross-site request forgery attack, resend requests, or upload or delete arbitrary files.

    PTC
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 5.7
    CVE-2023-31200

    PTC Vuforia Studio Cross-Site Request Forgery

    PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.

    PTC Vuforia Studio
  • Medium 6.2
    CVE-2023-29502

    PTC Vuforia Studio Path Traversal

    Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a different path.

    PTC Vuforia Studio
  • High 8.0
    CVE-2023-27881

    PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type

    A user could use the “Upload Resource” functionality to upload files to any location on the disk.

    PTC Vuforia Studio
  • Medium 6.2
    CVE-2023-29152

    PTC Vuforia Studio Improper Authorization

    By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.

    PTC Vuforia Studio
  • Low 1.8
    CVE-2023-24476

    PTC Vuforia Studio Improper Authorization

    An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.

    PTC Vuforia Studio
  • Low 3.7
    CVE-2023-29168

    PTC Vuforia Studio Insufficiently Protected Credentials

    The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.

    PTC Vuforia Studio