Medium severity5.9NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-28828

Description

A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.

Affected products

Polarion/Polarion ALMllm-create
Range: <V22R2
Siemens Foundation/Polarioncpe-rescue
Range: All versions < V22R2

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-632164.pdfnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000