1. Home
  2. CVE Database
  3. CVE-2024-51445
MEDIUM · 6.5

CVE-2024-51445

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XXE) vulnerability in ...

Vulnerability Description

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XXE) vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from the application server.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SiemensPolarion Alm>= 2404.0, < 2404.4

Related Weaknesses (CWE)

CWE-611

References

FAQ

What is CVE-2024-51445?

CVE-2024-51445 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XXE) vulnerability in ...

How severe is CVE-2024-51445?

CVE-2024-51445 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-51445?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Polarion Alm.