What’s Vulnerable › Vulnerabilities

CVE-2023-4296: PTC Codebeamer Cross site scripting

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-29 · updated 2026-06-17
• Weakness: CWE-79

Description

​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

Affected products

• PTC Codebeamer: 21.09.0, 21.09.0-sp1, 21.09.0-sp10, 21.09.0-sp11, 21.09.0-sp12, 21.09.0-sp13 (+23)

References

• http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2023/Sep/10
• https://codebeamer.com/cb/wiki/31346480
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01
• http://packetstormsecurity.com/files/174703/PTC-Codebeamer-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2023/Sep/10
• https://codebeamer.com/cb/wiki/31346480
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-241-01

Get alerted when CVE-2023-4296 or the next vulnerability affects your stack