CVE-2021-40357: Siemens Teamcenter Active Workspace

Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.

Affected products

• Siemens Teamcenter Active Workspace: from 4.3.0, before 4.3.10 (fixed in 4.3.10); from 5.0.0, before 5.0.8 (fixed in 5.0.8); from 5.1.0, before 5.1.5 (fixed in 5.1.5); from 5.2.0, before 5.2.1 (fixed in 5.2.1)

Published 2021-09-14. Last modified 2026-06-17.