FlexPLM vulnerabilities
5 known vulnerabilities in FlexPLM from PTC. 5 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.0 Critical severity
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and…
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
- 7.7 High severity
Windchill PDMLink: Deserialization of Untrusted Data
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
- 9.2 Critical severity
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and…
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
- 9.8 Critical severity
PTC Windchill and FlexPLM Improper Input Validation Exploited
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions * The identified
- 9.3 Critical severity
Windchill PDMLink: Improper Control of Generation of Code
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.