Ptc Thingworx Platform — known CVE vulnerabilities

Every CVE whose affected-product data names Ptc Thingworx Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-17217 — CVSS 7.5 (high): An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
• CVE-2018-20092 — CVSS 7.5 (high): PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
• CVE-2018-17216 — CVSS 6.5 (medium): An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.
• CVE-2018-17218 — CVSS 5.4 (medium): An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.