CVE-2018-11450

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software TEAMCENTER V9.1.3 and newer are not affected.

• CWE-79
• CWE-79

• https://github.com/LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected-Cross-Site-Scripting-XSS-vulnerability/wikiExploit, Third Party Advisory
• https://github.com/LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected-Cross-Site-Scripting-XSS-vulnerability/wikiExploit, Third Party Advisory

Published

Jul 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11445A CSRF issue was discovered on the User Add/System Settings …
• CVE-2018-11446The buy function of a smart contract implementation for Gold…
• CVE-2018-11447A vulnerability has been identified in SCALANCE M875 (All ve…
• CVE-2018-11448A vulnerability has been identified in SCALANCE M875 (All ve…
• CVE-2018-11449A vulnerability has been identified in SCALANCE M875 (All ve…
• CVE-2018-1145A remote unauthenticated user can overflow a stack buffer in…
• CVE-2018-11451A vulnerability has been identified in Firmware variant IEC …
• CVE-2018-11452A vulnerability has been identified in Firmware variant IEC …
• CVE-2018-11453A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-11454A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-11455A vulnerability has been identified in Automation License Ma…
• CVE-2018-11456A vulnerability has been identified in Automation License Ma…