Description
A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host header injection vulnerability that could allow an attacker to spoof a Host header information and redirect users to malicious websites.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Polarion ALM | All versions < V2304.0 | — |
Advisories 2
- ICSA-22-349-08 Siemens Polarion ALM CISA ICS & IT advisories · May 6, 2025
- SSA-792594 SSA-792594: Host Header Injection Vulnerability in Polarion ALM Siemens ProductCERT · Apr 11, 2023