Thingworx

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-40395 MEDIUM This Month

An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Thingworx

NVD

CVSS 3.1

6.5

EPSS

0.6%

CVE-2024-40395

EPSS 1% CVSS 6.5

MEDIUM This Month

An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Thingworx

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy