Description
PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FlexPLM | PTC / FlexPLM | >= 0, <= 11.0 M030 | affected |
| FlexPLM | PTC / FlexPLM | 11.1 M020 | affected |
| FlexPLM | PTC / FlexPLM | 11.2.1.0 | affected |
| FlexPLM | PTC / FlexPLM | 12.0.0.0 | affected |
| FlexPLM | PTC / FlexPLM | 12.0.2.0 | affected |
| FlexPLM | PTC / FlexPLM | 12.1.2.0 | affected |
| FlexPLM | PTC / FlexPLM | 12.1.3.0 | affected |
| FlexPLM | PTC / FlexPLM | 13.0.2.0 | affected |
| FlexPLM | PTC / FlexPLM | 13.0.3.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | >= 0, <= 11.0 M030 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 11.1 M020 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 11.2.1.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 12.0.2.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 12.1.2.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 13.0.2.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 13.1.0.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 13.1.1.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 13.1.2.0 | affected |
| Windchill PDMLink | PTC / Windchill PDMLink | 13.1.3.0 | affected |